Disable SSLv3 389 Directory Server

To do this, first of all we have to modify the 389 Directory administration console ===

In this entry we are going to disable the SSLv3 protocol in 389 Directory Server to work through TLS

To do this, first of all we have to modify the 389 Directory Server administration console

Bash

vi /etc/dirsrv/admin-serv/console.conf

We look for the line: NSSProtocol SSLv3,TLSv1 and we must eliminate SSLV3 remaining as follows:

text

NSSProtocol TLSv1.1

After deactivating SSLv3 in the administrative console we have to connect through LDAP and modify the encryption type

text

ldapmodify -D «cn=directory manager» -W

dn: cn=encryption,cn=config

changetype: modify

replace: nsSSL3

nsSSL3: off

We restart the service

text

/etc/init.d/dirsrv restart

To check if SSLv3 is disabled:

text

openssl s_client -connect hostname:389 -ssl3

openssl s_client -connect hostname:636 -ssl3

openssl s_client -connect hostname:9830 -ssl3

:wq!

Comments