Skip to content

Instantly share code, notes, and snippets.

@paulokruz
Created November 15, 2024 18:25
Show Gist options
  • Save paulokruz/897218d4a23172fe128d02e948cd22d5 to your computer and use it in GitHub Desktop.
Save paulokruz/897218d4a23172fe128d02e948cd22d5 to your computer and use it in GitHub Desktop.
Ubuntu 22.04.5 and OpenSSL 3.0.2 15 - Set lower SSL security level
# Changes on /etc/ssl/openssl.cnf
# cmd:openssl version
# OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
[provider_sect]
default = default_sect
+legacy = legacy_sect //add
[default_sect]
-# activate = 1 // uncomment
+activate = 1
+[legacy_sect] // add
+activate = 1 // add
[system_default_sect]
CipherString = DEFAULT:@SECLEVEL=2
#important
+MinProtocol = TLSv1 // add
+CipherString = DEFAULT@SECLEVEL=1 // add
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment