GFI Software Aurea SMB Solutions


Home » GFI User Forums » Kerio Control » Why is TLS 1.0 still available?
dialog-warning.png  Why is TLS 1.0 still available? [message #144045] Thu, 27 September 2018 17:20 Go to next message
UnifiedTechs-Brian is currently offline  UnifiedTechs-Brian
Messages: 159
Registered: March 2011
Location: Vero Beach, FL
The End of Life for the use of TLS 1.0 to be PCI compliant ran out in June, that means if your Firewall supports TLS 1.0 (Kerio Control, cough, cough) it is no longer possible to be PCI compliant.

Does GFI have a timeline to get this fixed?


- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions

[Updated on: Fri, 28 September 2018 19:25]

Report message to a moderator

Re: Why is TLS 1.0 still available? [message #144143 is a reply to message #144045] Sat, 06 October 2018 22:52 Go to previous messageGo to next message
billybob is currently offline  billybob
Messages: 29
Registered: October 2018
Probably the workaround would work till they fix it hopefully?

/opt/kerio/winroute/tinydbclient "update ssl set forcetlsv1_1=1"
/etc/boxinit.d/60winroute restart
Re: Why is TLS 1.0 still available? [message #144214 is a reply to message #144143] Mon, 15 October 2018 09:19 Go to previous messageGo to next message
ameliaharry654 is currently offline  ameliaharry654
Messages: 1
Registered: October 2018
Location: United States
Thanks for sharing
Re: Why is TLS 1.0 still available? [message #144290 is a reply to message #144214] Mon, 22 October 2018 21:37 Go to previous messageGo to next message
lessore is currently offline  lessore
Messages: 45
Registered: October 2010
Location: Munich
Hello guys,

iam not sure, but after upgrading kerio control ist this value still active ? Or do i have do manually update the setting every upgrade ?
Re: Why is TLS 1.0 still available? [message #144291 is a reply to message #144290] Mon, 22 October 2018 21:45 Go to previous messageGo to next message
UnifiedTechs-Brian is currently offline  UnifiedTechs-Brian
Messages: 159
Registered: March 2011
Location: Vero Beach, FL
My understanding, from when the work around was first shown to me a while ago, is it must be reapplied after every update. Don't believe that has changed because the file you edit is rewritten every update.

- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions
Re: Why is TLS 1.0 still available? [message #144478 is a reply to message #144291] Fri, 23 November 2018 08:03 Go to previous messageGo to next message
elmaasheley147 is currently offline  elmaasheley147
Messages: 1
Registered: November 2018
Location: United States
Great info
Re: Why is TLS 1.0 still available? [message #144510 is a reply to message #144478] Thu, 29 November 2018 10:02 Go to previous messageGo to next message
Tazho is currently offline  Tazho
Messages: 16
Registered: July 2013
Location: UK
Morning,
Are there any workarounds for windows server installs. I've seen some options in the mailserver.cfg file :-
<variable name="ServerTlsProtocols"></variable>
<variable name="ServerTlsCiphers"></variable>
<variable name="ClientTlsProtocols"></variable>
<variable name="ClientTlsCiphers"></variable>

but no idea what would go in them.
Re: Why is TLS 1.0 still available? [message #144511 is a reply to message #144510] Thu, 29 November 2018 10:12 Go to previous messageGo to next message
Tazho is currently offline  Tazho
Messages: 16
Registered: July 2013
Location: UK
Please ignore, found the options in another thread.
Re: Why is TLS 1.0 still available? [message #144521 is a reply to message #144510] Thu, 29 November 2018 17:46 Go to previous message
UnifiedTechs-Brian is currently offline  UnifiedTechs-Brian
Messages: 159
Registered: March 2011
Location: Vero Beach, FL
Kerio Control can not be run on Windows, you are probably looking for Kerio Connect.

- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions
Previous Topic: Allow to access the specific website after user traffic ended
Next Topic: upgrade 9.2.8 - problem tunnel vpn
Goto Forum:
  


Current Time: Wed Nov 20 05:34:05 CET 2019

Total time taken to generate the page: 0.04353 seconds