Isilon InsightIQ: How to disable weak SSL/TLS ciphers for InsightIQ
摘要: This article describes how to disable SSL/TLS ciphers that are considered weak.
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
说明
WARNING: This change will implicitly disable everything except for TLS 1.2.
1. Connection to InsightIQ via SSH
2. Open the uwsgi.ini configuration file with a text editor
vi /etc/isilon/uwsgi.ini
3. Append :!SHA to the end of the https setting. When you're done, the line will look like this:
Note: If your machine has IPv6 disabled, the value will start with 0.0.0.0 instead of [::]
https = [::]:443,/etc/ssl/certs/server.crt,/etc/ssl/certs/server.key,ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS:!SHA
4. Restart InsightIQ by running the following command:
iiq_restart
其他信息
受影响的产品
Isilon InsightIQ产品
Isilon InsightIQ文章属性
文章编号: 000022835
文章类型: How To
上次修改时间: 03 4月 2025
版本: 5
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。