This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
EDirectory TLS
EDirectory TLS

Version management

Difference between version and

At line 1 added 103 lines
!!! Overview
[{$pagename}] supports use of [LDAPS] and [StartTLS]
[{$pagename}] and [TLS] [Version]
* [TLS 1.3] - N/A (2018-10-03)
* [TLS 1.2]
** [EDirectory 9.0.0.0 (40002.79)] and Later
* [TLS 1.1]
** [EDirectory 9.0.0.0 (40002.79)] and Later
* [TLS 1.0]
** [EDirectory 9.0.0.0 (40002.79)] and Later
** [EDirectory 8.8.8.0 (20801.46)] and Later
* [SSLv3]
** [EDirectory 8.8.8.0 (20801.46)] - Enabled by default for LDAPS. SSLv3 support can be disabled in iManager using the LDAP Options role.
** [EDirectory 9.0.0.0 (40002.79)] - By default, [eDirectory] is in [FIPS] mode which will not allow [SSLv3] ciphers. To disable [FIPS] mode and allow [SSLv3] handshakes, pass [n4u.server.fips_tls]=0 as a parameter for the ndsconfig set command and restart the server.
* [SSLv2]:
** [EDirectory 8.8.8.0 (20801.46)] - has always been disabled and cannot be manually re-enabled.
** [EDirectory 9.0.0.0 (40002.79)] - in [FIPS] mode which will not allow [SSLv2]. However, the server can still be configured to allow it.
%%warning
all earlier versions of [eDirectory] have several [Vulnerability]
%%
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop