Nodejs SSL/TLS Security Settings - Revision history

IVSWikiBlue at 18:54, 27 October 2023

2023-10-27T18:54:31Z

← Older revision		Revision as of 18:54, 27 October 2023
Line 1:		Line 1:
	~~<div class="section">~~
	# Connect to the server via ssh or access the shell via the console.		# Connect to the server via ssh or access the shell via the console.
	# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>		# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>
Line 16:		Line 15:

	<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>		<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>
	~~</div>~~

IVSWikiBlue at 13:36, 29 September 2022

2022-09-29T13:36:56Z

← Older revision		Revision as of 13:36, 29 September 2022
Line 1:		Line 1:
			<div class="section">
	# Connect to the server via ssh or access the shell via the console.		# Connect to the server via ssh or access the shell via the console.
	# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>		# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>
Line 15:		Line 16:

	<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>		<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>
			</div>

IVSWikiBlue: Created page with "# Connect to the server via ssh or access the shell via the console. # Type in the following, and then press Enter:

sudo nano /var/www/v3/nodejs/server.js

# Locate..."

2021-05-04T16:55:53Z

Created page with "# Connect to the server via ssh or access the shell via the console. # Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre> # Locate..."

New page

# Connect to the server via ssh or access the shell via the console.
# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>
# Locate the line in the file <pre>ca: fs.readFileSync('/etc/apache2/ssl/valt.crt') // path to ca</pre>
# add a comma to end the of this line after the closing ).
# Add the following lines below this line:
<pre>secureProtocol: 'TLSv1_2_method',
ciphers: ['ECDH+AESGCM','DH+AESGCM','ECDH+AES256','DH+AES256','ECDH+AES128','DH+AES','RSA+AESGCM','RSA+AES','!aNULL','!MD5','!DSS'].join(':'),
honorCipherOrder: true</pre>
# Type '''CTRL-X''' and then press Enter to exit.
# Enter '''Y''' to save changes.
# Do not change the name and press Enter to save the changes.
# Type in the following, and then press Enter: <pre>sudo service valtcontrols restart</pre>

You can verify the active ciphers by running the following command:

<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>