Restrictions on connections from specific SSL versions

The stanza entries that control connections for specific SSL and TLS versions are in the [ssl] stanza of the WebSEAL configuration file. By default SSL version 2 is disabled. All other SSL and TLS versions are enabled by default. We can independently enable and disable connectivity for the following communication protocol versions:

• Secure Sockets Layer (SSL) version 2
• SSL version 3
• Transport Layer Security (TLS) version 1
• TLS version 1.1
• TLS version 1.2

Syntax:

[ssl]
disable-ssl-v2 = {yes|no}
disable-ssl-v3 = {yes|no}
disable-tls-v1 = {yes|no}
disable-tls-v11 = {yes|no}
disable-tls-v12 = {yes|no}

Parent topic: Communication protocol configuration