• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question how can i Deploy (Ephemeral) Elliptic-Curve Diffie-Hellman or usea 2048-bit or stronger Diffie-Hellm

elaa

elaa

Basic Pleskian
one of the clients has run a security scan for the site web that I am working on, so he found some issues that i need to fix
these issues are :
FTP Unencrypted Cleartext Login
// solution: Enable FTPS or enforce the connection via the 'AUTH TLS'

SMTP Unencrypted Cleartext Login
//solution: Enable SMTPS or enforce the connection via the 'STARTTLS' command

POP3 Unencrypted Cleartext Login
//solution:
Configure the remote server to always enforce encrypted connections via SSL/TLS with the 'STLS' command

SSL/TLS: Diffie-Hellman Key Exchange Insufficient DH Group Strength Vulnerability...
//solution:
Deploy (Ephemeral) Elliptic-Curve Diffie-Hellman (ECDHE) or use a 2048-bit or stronger Diffie-Hellman group

I have been searching how to apply these solutions so long but I could not find a way if anyone knows how I would be grateful
I am using Plesk onyx, Nginx with a user account
 
You must log in or register to reply here.

Similar threads

elaa
Issue how can i fix those problems
Replies
1
Views
4K
Martin Dias
Martin Dias
elaa
Issue how can i Enable FTPS or enforce the connection via the 'AUTH TLS' command.
Replies
1
Views
2K
Finle11y
F
Back
Top