Nagios Support Forum

How disable SSLv3 on Nagios XI and enable TLSv1.1/TLSv1.2

You can control which protocols are allowed to connect to XI's interface by editing /etc/httpd/conf.d/ssl.conf. Disable SSLv2 and v3 for example with the line:

SSLProtocol all -SSLv2 -SSLv3

Suggested configuration tested, but not working.

Please find below output :

# openssl ciphers -v | awk '{print $2}' | sort | uniq
SSLv3
TLSv1.2

All that tells you is that openssl has some SSLv3 based ciphers available to it. It's not indicative of what protocols/services are accepting which ciphers.

I guess I'm a bit confused as to what exactly you're looking to accomplish? You could recompile openssl without SSLv2 or SSLv3 support, but frankly that's not something anyone on this forum should be assisting you with as it's well outside the scope of Nagios related things.

Thanks for the input, @mcapra!

We found disable option in ssl.conf.

Please close this thread.