search

jcrodriguez-dis / moodle-mod_vpl

Virtual Programming Lab for Moodle (Module)
GNU General Public License v3.0
98 stars 85 forks source link

Disable SSLProtocol #105

Closed mtalero-20 closed 1 year ago

mtalero-20 commented 4 years ago

Es posible deshabilitar protocolos de cifrado ssl desde la configuración en /etc/vpl/vpl-jail-system.conf SSLProtocol all -TLSv1 -SSLv3

jcrodriguez-dis commented 4 years ago

No, at this moment there is no option at vpl-jail-system.conf to disable specific SSL protocols. To change the supported protocols you modify the code and recompile the daemon. Change the code at https://github.com/jcrodriguez-dis/vpl-xmlrpc-jail/blob/V2.5.3/src/socket.h#L52 Change it by SSL_CTX_set_options(context, SSL_OP_NO_SSLv3|SSL_OP_NO_TLSv1|SSL_OP_NO_TLSv1_1);

This will be included in the next version.

Best regards, Juan Carlos.

jcrodriguez-dis commented 1 year ago

Please note that this issue is related to the VPL-JAIL-SYSTEM, which can be found in the repository https://github.com/jcrodriguez-dis/vpl-xmlrpc-jail.

I'm glad to inform you that the issue has been successfully resolved by adding the options SSL_CIPHER_LIST and SSL_CIPHER_SUITES to the configuration file.

For more detailed information, please refer to the documentation of VPL-JAIL-SYSTEM.