Disable SSLv3

lyka.i.bernardo

Hello,

We are using OpenVPN Access Server 2.4.1 and by default, SSLv3 is enabled. Is there a way to disable this protocol?

Thanks,
Lyka

The Johan

Yes, under SSL Settings > web services > minimum level, TLS 1 or higher.

Beware; changing TLS settings for the OPENVPN DAEMONS here can have consequences for connectivity from older clients. That setting is also unrelated to the web services.

lyka.i.bernardo

novaflash wroteYes, under SSL Settings > web services > minimum level, TLS 1 or higher.

Beware; changing TLS settings for the OPENVPN DAEMONS here can have consequences for connectivity from older clients. That setting is also unrelated to the web services.

Thanks! But is there a way to completely disable it?

The Johan

Setting the minimum to TLSv1 disables SSLv3 in the Access Server. Nowhere else in the Access Server is SSLv3 still used. No other settings are available to influence this as no other settings are necessary.