Direkt zum Hauptinhalt

Neue Seite



Edit openssl.conf file:

sudo nano /etc/ssl/openssl.cnf

Add this line at the top:

openssl_conf = openssl_init

And add these lines at the end:

[openssl_init]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
CipherString = DEFAULT@SECLEVEL=1

It works for me. :)

For any system add at the top of openssl.cnf:

openssl_conf = default_conf

and at end of openssl.cnf:

  • For Debian add:

    [system_default_sect]
    MinProtocol = TLSv1.0
    CipherString = DEFAULT@SECLEVEL=2
    
  • For Ubuntu 20.04 add:

    [system_default_sect]
    MinProtocol = TLSv1    #important !
    CipherString = DEFAULT@SECLEVEL=2 # in my case works good with very old software