Disable tlsv1.1 in https server

Asterisk Asterisk Support
1

Hi
I want to disable tlsv1.1 in https server,the port is 8089.But I don’t know how to do it.If you can give me some advice,very thanks.
Here is my http show status:

server-1-87*CLI> http show status
HTTP Server Status:
Prefix: 
Server: Asterisk/18.17.0
Server Enabled and Bound to 0.0.0.0:8088

HTTPS Server Enabled and Bound to 0.0.0.0:8089

Enabled URI's:
/httpstatus => Asterisk HTTP General Status
/phoneprov/... => Asterisk HTTP Phone Provisioning Tool
/amanager => HTML Manager Event Interface w/Digest authentication
/metrics/... => Prometheus Metrics URI
/arawman => Raw HTTP Manager Event Interface w/Digest authentication
/manager => HTML Manager Event Interface
/rawman => Raw HTTP Manager Event Interface
/static/... => Asterisk HTTP Static Delivery
/amxml => XML Manager Event Interface w/Digest authentication
/mxml => XML Manager Event Interface
/ari/... => Asterisk RESTful API
/ws => Asterisk HTTP WebSocket

Enabled Redirects:
  None.

Here is my http.conf:

[general]
enabled=yes
enablestatic=yes

bindaddr=0.0.0.0
bindport=8088
prefix=
sessionlimit=1000
session_inactivity=30000
session_keep_alive=15000

tlsenable=yes
tlsbindaddr=0.0.0.0:8089


tlscertfile=/opt/disk/asterisk/etc/asterisk/keys/server.crt
tlsprivatekey=/opt/disk/asterisk/etc/asterisk/keys/server.key

tlsprotocol=tlsv1_2       ; Ensure only TLS v1.2 is used
tlscipher=HIGH            ; Use high encryption ciphers
2
1 Like
3

I also ask, where did this “tlsprotocol” in your existing http.conf come from?

4

chatgpt :joy:

5

thanks! :+1: :+1: :+1:

6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.