• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • Support for BIND DNS has been removed from Plesk for Windows due to security and maintenance risks.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS.

Question CAMELLIA Cipher removal after Tune Plesk to Meet PCI DSS on Linux

Will B

New Pleskian
I already used Tune Plesk to Meet PCI DSS on Linux at Tune Plesk to Meet PCI DSS on Linux

I went through everything, now I am trying to take out 4 ciphers.

tlsv1.1 tlsv1.2

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA


Tune Plesk to Meet PCI DSS puts these ciphers:
--ciphers="EECDH+AESGCM+AES128:EECDH+AESGCM+AES256:EDH+AESGCM+AES128:EDH+AESGCM+AES256:EECDH+SHA256+AES128:EECDH+SHA384+AES256:EDH+SHA256+AES128:EDH+SHA256+AES256:EECDH+SHA1+AES128:EECDH+SHA1+AES256:EDH+SHA1+AES128:EDH+SHA1+AES256:EECDH+HIGH:EDH+HIGH:AESGCM+AES128:AESGCM+AES256:SHA256+AES128:SHA256+AES256:SHA1+AES128:SHA1+AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!KRB5:!aECDH:!EDH+3DES"

I am trying to remove CAMELLIA from the cipher list. I don't want to do away with tlsv1.1. I just want to remove CAMELLIA. Anyone know the ciphers in the list to remove to remove CAMELLIA?

Thank you
 
Same here. Running test on SSLLabs show me a lot of weak cyphers.
 

Attachments

  • 17-05-_2018_10-03-20.png
    17-05-_2018_10-03-20.png
    229.6 KB · Views: 6
Back
Top