How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
phoenix
Ambassador
Ambassador
Posts: 26152
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Postby phoenix » Thu Jul 11, 2019 5:28 pm

As you haven't posted any information about the error and only the 'error' message and unless you say otherwise I'm guessing that you're still using 1024 bits for DH? If that's the case then regenerate them at 2048 bits and run the test again. The wiki article does cover that and, FWIW, my ZCS 8.8.12P3 server gets an A+ for those tests.


Regards

Bill

Rspamd: A high performance spamassassin replacement

If you'd like to see this implemented in a future version of ZCS then please vote on Bugzilla entries 97706 & 108168
lovelord
Advanced member
Advanced member
Posts: 66
Joined: Sat Sep 13, 2014 12:23 am

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Postby lovelord » Mon Jul 15, 2019 8:30 am

phoenix wrote:As you haven't posted any information about the error and only the 'error' message and unless you say otherwise I'm guessing that you're still using 1024 bits for DH? If that's the case then regenerate them at 2048 bits and run the test again. The wiki article does cover that and, FWIW, my ZCS 8.8.12P3 server gets an A+ for those tests.


Hi Phoenix,

as mentioned in post before, I've entirely followed wiki and surely issued

Code: Select all

zmdhparam set -new 2048


and restarted all services.

Even doing all steps listed in wiki, I'm still capped to B. Can I provide any log to help you helping me?

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 34 guests