Disabling Old Protocols TLS 1.0 & 1.1

[khris2fer74]

Hello we currently are going through a pci vulnerability scan and our server is getting flagged for having the old protocol tls 1.0 enabled.

I went into the config file and put true next to Tls disabled 1.0 and 1.1 in the vpn conf file and we're still getting flagged (with the service stopped and rebooted)

Also have Openvpn clone feature turned on although it's only flagging on the main Softether vpn client port but there may be something there I don't know about

Is there somewhere else where the server is keeping the old TLS versions enabled? This is the last part to getting it passed. I was able to import a valid cert which was part of it too. Anyone ever come across this?

[solo]

It works for me. On SE v4.44 after Tls_Disable1_0=true and Tls_Disable1_1=true I get:

Code: Select all

>sslscan 192.168.11.3
Version: 2.2.2 Windows 64-bit (Mingw)
OpenSSL 3.5.4 30 Sep 2025
Connected to 192.168.11.3
Testing SSL server 192.168.11.3 on port 443 using SNI name 192.168.11.3
  SSL/TLS Protocols:
SSLv2     disabled
SSLv3     disabled
TLSv1.0   disabled
TLSv1.1   disabled
TLSv1.2   enabled
TLSv1.3   enabled