Logjam solution required

[Christian_Heutger]

https://weakdh.org/sysadmin.html describes the problem and the solution. It's required, that Plesk is handling this security adjustments.

 

[UFHH01]

Hi Christian_Heutger,

there are several solutions/suggestions here at the Plesk - Forum and over the Odin/Parallels - Knwoledge-Base. If you experience any issues/problems, please describe your issue/problem and let us know your operating system, your Plesk version ( incl. MUs ) and probably add log - files and/or configuration files, so we can help you with investigations and suggestions.

Parallels Plesk Panel for Linux services logs and configuration files ( KB - article: 111 283 )​

Here are some more links, you might like:

Dokumentations:​

Parallels Plesk - Documentations​

Parallels Knowledge - Base:​

Parallels Knowledgebase​

Parallels Knowledge - Base eMail - Subscription:​

Parallels Knowledge - Base eMail - Subscription​

Forums - Search:​

Parallels Forums Search​

 

[Christian_Heutger]

Ehm, I paid for an "optimized computing" solution like Plesk to have it done by plesk and no listing of configuration files, I can adjust by myself?! However I'm afraid that won't set dhparams for all existing and future sites?

 

[Lloyd_mcse]

However I'm afraid that won't set dhparams for all existing and future sites?

Hi Christian_Heutger,

You would need to copy the templates for Nginx with SSL Directives from..

/usr/local/psa/admin/conf/templates/default/

to

/usr/local/psa/admin/conf/templates/custom/

And then edit to add the dh_param directive.

You must also keep the directory structure, so

/usr/local/psa/admin/conf/templates/default/domain/nginxDomainVirtualHost.php

Must be copied to..

/usr/local/psa/admin/conf/templates/custom/domain/nginxDomainVirtualHost.php

Then you'll need to rebuild your domains with...

/usr/local/psa/admin/bin/httpdmng --reconfigure-all

I hope that helps
Kind regards

Lloyd

 

[Brujo]

well thats a solution for the vhosts, but what about the Plesk Panel itself?
This server supports weak Diffie-Hellman (DH) key exchange parameters - by Qualys SSL Report

 

[UFHH01]

Hi Brujo,

the search over the forum ( keyword "dhparam" in the forum "Plesk 12.x for Linux" ) would have pointed to this post as well:

https://talk.plesk.com/threads/ssl-poodle-sslv3-bug.323338/#post-761018​

 

[Brujo]

thanks UFHH01
I was searching around and have found several thread and KB Articles but missed this one.

Brujo