You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@trafficcontrol.apache.org by Hank Beatty <hb...@apache.org> on 2020/07/25 00:32:25 UTC

Turning off TLS v1 in Traffic Portal

Hello,

If anyone needs to turn off tlsv1 in Portal add this:

sslOptions['secureOptions'] = constants.SSL_OP_NO_TLSv1;

to server.js in the traffic_portal directory after

var sslOptions = {};

in the

if (useSSL) {

stanza.


diff:

# diff -u server.js.orig server.js
--- server.js.orig	2020-07-24 17:32:06.364578424 +0000
+++ server.js	2020-07-24 17:33:18.336011456 +0000
@@ -109,6 +109,7 @@
      // from the list of supported protocols that SSLv23_method supports.
      //
      var sslOptions = {};
+    sslOptions['secureOptions'] = constants.SSL_OP_NO_TLSv1;
      sslOptions['key'] = fs.readFileSync(config.ssl.key);
      sslOptions['cert'] = fs.readFileSync(config.ssl.cert);


Regards,
Hank