How to disable TLS 1.0 and 1.1 in SLES 15.4?

Tushar Vanzara 20 Reputation points
2024-09-19T10:09:01.6066667+00:00

This is regarding alert I received:
"Action recommended: Ensure your resources that interact with Azure services are using TLS 1.2 by 31 October 2024"

Question: Do I need to disable TLS 1.0/1.1 at OS level on SLES 15.4 or not? Our environment is having SLES 15.4 OS Installed and Currently, the output is as below. I would like to know if I need to know any action?

serverhost # openssl ciphers -v | awk '{print $2}' | sort | uniq

SSLv3

TLSv1

TLSv1.2

TLSv1.3

Also, If we need to disable it from Apache/Nginx side? Thank you.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,913 questions
Azure App Configuration
Azure App Configuration
An Azure service that provides hosted, universal storage for Azure app configurations.
231 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,785 questions
{count} votes

Accepted answer
  1. TP 95,786 Reputation points
    2024-09-19T10:42:06.1033333+00:00

    Hi Tushar,

    You don't have to disable any incoming TLS versions on your VM(s) as a result of alert you received.

    The alert is for any applications that interact with Azure services.

    For example, say you have a web application that makes API calls to an Azure Storage account, and your application currently uses TLS 1.1. In this case you would need to update your web application before the deadline because it would stop working on November 1st.

    Please click Accept Answer and upvote if the above was helpful.

    Thanks.

    -TP


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.