300字范文,内容丰富有趣,生活中的好帮手!
300字范文 > 漏洞修复:TLS 1.0 enabled

漏洞修复:TLS 1.0 enabled

时间:2021-10-27 04:04:35

相关推荐

漏洞修复:TLS 1.0 enabled

其他组件扫描

AppScan 发现服务器支持较老的 TLS 版本(TLSv1.0 或 TLSv1.1)

描述

The web server supports encryption through TLS 1.0. TLS 1.0 is not considered to be "strong cryptography" as defined and required by the PCI Data Security Standard 3.2(.1) when used to protect sensitive information transferred to or from web sites. According to PCI, "30 June is the deadline for disabling SSL/early TLS and implementing a more secure encryption protocol – TLS 1.1 or higher (TLS v1.2 is strongly encouraged) in order to meet the PCI Data Security Standard (PCI DSS) for safeguarding payment data.

详情

The SSL server (port: 443) encrypts traffic using TLSv1.0

解决方案

nginx:

在server中添加ssl_protocols TLSv1.2 TLSv1.3;

例如:

server {ssl_protocols TLSv1.2 TLSv1.3;}

参考:/zh-CN/%E6%8C%87%E5%AF%BC/%E7%A6%81%E7%94%A8tls-1-0%E5%92%8C1-1-apache-nginx/#ftoc-heading-7

本内容不代表本网观点和政治立场,如有侵犯你的权益请联系我们处理。
网友评论
网友评论仅供其表达个人看法,并不表明网站立场。