pointing the SSL/TLS testing tool at GMS comes up with lots of failures
(tools such as
https://www.ssllabs.com/ssltest/
https://www.digicert.com/help/
https://sslanalyzer.comodoca.com/?url= )
As the ciphers do gradually change and it varies what we each are permitted to use, being able to manage it would be a very good thing. Currently the controls are very hidden (undocumented config files) and not entirely supported if one does change the related settings. Being able to select which ciphers either in the regular admin interface or even just a basic tool like mcheck.pyc would be a very good thing.
by: Andy K. | over a year ago | Mobility Services
Comments
I Agree! It would be nice to get an A on the check...
The 14.2.2 GMS release we will get an A on the SSL Lab test when running on SLES 12 SP2 or later. This is not available on SLES 11 because TLS 1.2 is not available on SLES 11.
Great, looking forward to a better score with those tests, but will we be able to control which ciphers are in use in 14.2.2+? Am thinking of those times when a particular cipher is breached and we need to stop just that one cipher even when it isn't an old one.
This is in the 14.2.2 version of mobility that is now shipping when running on SLES 12