Author Topic: TLS 1.1/1.0 deactivation  (Read 300 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
TLS 1.1/1.0 deactivation
« on: April 17, 2026, 04:13:16 PM »
When I look in the config file for httpd, it seems as if the deprecated protocols are disabled. When I check on different verification tools online, they are still activated.

When I try:

update-crypto-policies --show (it shows default)

and then

update-crypto-policies --set FUTURE

apache breaks after reboot

There seems to be a misconfig somewhere, as the tls settings as mentioned seems ok, but just doesn´t reflect when checked

Running cwp pro (0.9.8.1224) latest version on AlmaLinux 9.7 - latest update and kernel 5.14.0-611.47.1.el9_7.x86_64

Any ideas on how to disable the old tls protocols globally on the server without breaking other stuff?


Offline
*****
Re: TLS 1.1/1.0 deactivation
« Reply #1 on: April 18, 2026, 01:37:41 AM »
Take a look at Sandeep's guide for Apache here:
https://www.alphagnu.com/topic/37-cwp-apache-enable-tls-13-control-web-panel/
He also has one for nginx, but I'm assuming you are after an Apache config...
https://www.alphagnu.com/topic/47-how-to-enable-tls-13-in-cwp-nginx-reverse-proxy/