Nodejs SSL/TLS Security Settings - Revision history

IVSWikiBlue at 18:54, 27 October 2023

2023-10-27T18:54:31Z

IVSWikiBlue at 13:36, 29 September 2022

2022-09-29T13:36:56Z

IVSWikiBlue: Created page with "# Connect to the server via ssh or access the shell via the console. # Type in the following, and then press Enter:

sudo nano /var/www/v3/nodejs/server.js

# Locate..."

2021-05-04T16:55:53Z

Created page with "# Connect to the server via ssh or access the shell via the console. # Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre> # Locate..."

New page

# Connect to the server via ssh or access the shell via the console.
# Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>
# Locate the line in the file <pre>ca: fs.readFileSync('/etc/apache2/ssl/valt.crt') // path to ca</pre>
# add a comma to end the of this line after the closing ).
# Add the following lines below this line:
<pre>secureProtocol: 'TLSv1_2_method',
ciphers: ['ECDH+AESGCM','DH+AESGCM','ECDH+AES256','DH+AES256','ECDH+AES128','DH+AES','RSA+AESGCM','RSA+AES','!aNULL','!MD5','!DSS'].join(':'),
honorCipherOrder: true</pre>
# Type '''CTRL-X''' and then press Enter to exit.
# Enter '''Y''' to save changes.
# Do not change the name and press Enter to save the changes.
# Type in the following, and then press Enter: <pre>sudo service valtcontrols restart</pre>

You can verify the active ciphers by running the following command:

<pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>

@@ Line 1: / Line 1: @@
 # Connect to the server via ssh or access the shell via the console.
 # Type in the following, and then press Enter: <pre>sudo nano /var/www/v3/nodejs/server.js</pre>
@@ Line 16: / Line 15: @@
 <pre>nmap -sV --script ssl-enum-ciphers -p 20100 <host></pre>