Terminated TLSv1 and TLSv1.1 support
short description
I've upgraded to ISPConfig Version: 3.2
and from what I can read in the changelog and this issue: #5088 (closed) the mentioned TLS versions should be disabled afterwards. But when I scan my website with ssllabs, they show that it is still enabled:
Protocols
TLS 1.3 No
TLS 1.2 Yes*
TLS 1.1 Yes
TLS 1.0 Yes*
SSL 3 No
SSL 2 No
I followed the update procedure here: https://www.howtoforge.com/updating-ispconfig-3-1-to-ispconfig-3-2/
correct behaviour
TLS v1 and v1.1 should be disabled
environment
Server OS: centos
Server OS version: CentOS Linux release 7.8.2003 (Core)
ISPConfig version: 3.2
If it might be related to the problem
Server version: Apache/2.4.6 (CentOS)
Server built: Apr 2 2020 13:13:23
proposed fix
no idea yet
where should I find the apache config code to remove the tls versions?