topic Re: Configure TLS Settings in Aerohive Migrated Content

Configure TLS Settings

christoph_vonwi — Fri, 13 Sep 2019 19:53:51 GMT

Where can I disable TLS 1.0 in HiveManager NG (on premise)? I cannot find an option...

Re: Configure TLS Settings

samantha_lynn — Sat, 14 Sep 2019 03:37:29 GMT

TLS 1.0 should be disabled by default on HiveManager versions 11.36 and above. Could you try updating your HiveManager version to the latest?

Re: Configure TLS Settings

christoph_vonwi — Sat, 14 Sep 2019 13:23:58 GMT

We are using version 19.5.1.7-NGVA and TLS 1.0 is clearly enabled.

openssl s_client -tls1 -connect hivemanager01.ourdomain.de:443

...

New, TLSv1.0, Cipher is ECDHE-RSA-AES128-SHA

Server public key is 4096 bit

...

Re: Configure TLS Settings

samantha_lynn — Tue, 01 Oct 2019 23:19:00 GMT

Thank you for your patience, I have been looking in to this for you and our engineers are asking if this is a new deployment or if you upgraded an old deployment to be on 19.5.1.7? If you upgraded, would it be possible to redeploy (and import a backup) to make sure TLS 1.0 is disabled for you?

Re: Configure TLS Settings

christoph_vonwi — Tue, 01 Oct 2019 23:29:54 GMT

That was a fresh install but I imported an migration config from the old HiveManager Classic.

Re: Configure TLS Settings

samantha_lynn — Wed, 02 Oct 2019 00:24:19 GMT

Thank you for confirming that for me. We are going to file a ticket with our engineers so we can get TLS disabled fully. I appreciate your patience with this. Just for our internal ticket notes, is there a specific concern you have regarding TLS 1.0?

Re: Configure TLS Settings

christoph_vonwi — Wed, 02 Oct 2019 14:16:53 GMT

https://www.digicert.com/blog/depreciating-tls-1-0-and-1-1/

https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/

https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/

https://security.googleblog.com/2018/10/modernizing-transport-security.html

https://blogs.windows.com/msedgedev/2018/10/15/modernizing-tls-edge-ie11/