Skip to main content

SSL Support

Thread needs solution

Aktuellste Version:

Die Management-Konsole unterstützt zur Zeit immer noch die unsicheren Protokolle SSL_v2 und SSL_v3. Leider unterstützt der Service auch noch einen Fallback zu den Protokollen.
Leider werden die Protokolle TLS 1.1 und TLS 1.2 nicht unterstützt.

Gibt es dazu u.U. einen Hotfix ?
Ist ein entsprechendes SicherheitsUpdate geplant ?

---

Current version:

The management console is currently supports the insecure protocols SSL_v2 and SSL_v3.
Unfortunately, the service supports a fallback to the insecure protocols.
Unfortunately, the protocols TLS 1.1 and TLS 1.2 are not supported.

Is a hotfix available?
Is a security update planned?

0 Users found this helpful
frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Posts: 22
Comments: 3800

Hi Reiner,

In our web console implementation we rely on Openssl library which provides SSL/TLS/etc. You can disable SSLv3 in the Lighttpd configuration file by adding/modifying the following parameter:

ssl.use-sslv3 = "disable"

The configuration file is present in c:\Program Files (x86)\Common Files\Acronis\LightTPD\lighttpd_server.conf (in case of Windows Agent installation) or in /etc/lighttpd/lighttpd.conf (in case of Appliance installation). You can find instructions on how to connect to appliance to perform files editing in https://kb.acronis.com/content/36100 article in troubleshooting section.

After that restart Acronis Lighttpd service or virtual appliance. As far as I have checked the connection from my browser was performed using TLS rather than SSL after these modifications.

Thank you.
--
Best regards,
Vasily
Acronis Virtualization Program Manager