Patching Plesk 12.5 for weak DH

[KarelB]

This script does not work anymore for Plesk 12.5:
http://kb.odin.com/en/125741

Is there a new version available?

I'm a bit disappointed though that Plesk 12.5 didn't come standard with SSLv2 and SSLv3 disabled and the stronger DH key as suggested in the LOGJAM prevention sites.

 

[Nosxxx]

See https://talk.plesk.com/threads/why-plesk-12-5-supports-weak-diffie-hellman.334794/

 

[MariusAZ]

Using this guide : http://download1.parallels.com/Ples...compliance-guide/index.htm?fileName=65871.htm

I was able to get A rating on SSL Test just by running the "/usr/local/psa/admin/bin/pci_compliance_resolver --enable all" command. "all" seems to be broke so just use "/usr/local/psa/admin/bin/pci_compliance_resolver --enable"

I rebooted afterwards but I don't know if this was necessary or not.

 

[xyptilon]

Also used "/usr/local/psa/admin/bin/pci_compliance_resolver --enable", the "all", indeed doesn't appear to be doing anything.

 

[MariusAZ]

Don't use the "all" option. It's broke. /usr/local/psa/admin/bin/pci_compliance_resolver --enable by itself works.