How to disable TLS 1.0 and 1.1 in SLES 15.4?

Tushar Vanzara 20

This is regarding alert I received:
"Action recommended: Ensure your resources that interact with Azure services are using TLS 1.2 by 31 October 2024"

Question: Do I need to disable TLS 1.0/1.1 at OS level on SLES 15.4 or not? Our environment is having SLES 15.4 OS Installed and Currently, the output is as below. I would like to know if I need to know any action?

serverhost # openssl ciphers -v | awk '{print $2}' | sort | uniq

SSLv3

TLSv1

TLSv1.2

TLSv1.3

Also, If we need to disable it from Apache/Nginx side? Thank you.

Lex Li (Microsoft) 5,742 Reputation points Microsoft Employee

2024-09-19T22:08:35.0466667+00:00

You'd better disable TLS 1.0/1.1 anywhere suitable (including SLES OS level) to reveal if any connection still uses the legacy protocols. "Azure services" can be a big term and covers data in/out, so even if you run a VM there you can be impacted. For that, I don't agree with the answer below.

Accepted answer

TP 100.9K Reputation points

2024-09-19T10:42:06.1033333+00:00

Hi Tushar,

You don't have to disable any incoming TLS versions on your VM(s) as a result of alert you received.

The alert is for any applications that interact with Azure services.

For example, say you have a web application that makes API calls to an Azure Storage account, and your application currently uses TLS 1.1. In this case you would need to update your web application before the deadline because it would stop working on November 1st.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP
Please sign in to rate this answer.
Tushar Vanzara 20 Reputation points

2024-09-19T14:36:07.6966667+00:00

Thanks TP. So Basically, at OS (hosted on Azure) level if we are using any Apache/Nginx web service that has nothing do with Azure then we don't have to do anything, correct?

TP 100.9K Reputation points

2024-09-19T14:41:17.3133333+00:00

Thanks TP. So Basically, at OS (hosted on Azure) level if we are using any Apache/Nginx web service that has nothing do with Azure then we don't have to do anything, correct?

Correct. You may decide on your own that you want to update the OS/Apache/Nginx so that they don't use older TLS versions, but that is your decision.

TP 100.9K Reputation points

2024-09-19T15:15:00.3333333+00:00

@Tushar Vanzara Please click Accept Answer and upvote to close up this thread.

Thank you.

Tushar Vanzara 20 Reputation points

2024-09-19T15:18:34.5866667+00:00

Thankn you.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to disable TLS 1.0 and 1.1 in SLES 15.4?

0 additional answers

Your answer