How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
phoenix
Ambassador
Ambassador
Posts: 27278
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Post by phoenix »

As you haven't posted any information about the error and only the 'error' message and unless you say otherwise I'm guessing that you're still using 1024 bits for DH? If that's the case then regenerate them at 2048 bits and run the test again. The wiki article does cover that and, FWIW, my ZCS 8.8.12P3 server gets an A+ for those tests.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
lovelord
Advanced member
Advanced member
Posts: 96
Joined: Sat Sep 13, 2014 12:23 am

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Post by lovelord »

phoenix wrote:As you haven't posted any information about the error and only the 'error' message and unless you say otherwise I'm guessing that you're still using 1024 bits for DH? If that's the case then regenerate them at 2048 bits and run the test again. The wiki article does cover that and, FWIW, my ZCS 8.8.12P3 server gets an A+ for those tests.
Hi Phoenix,

as mentioned in post before, I've entirely followed wiki and surely issued

Code: Select all

zmdhparam set -new 2048
and restarted all services.

Even doing all steps listed in wiki, I'm still capped to B. Can I provide any log to help you helping me?
Post Reply