时间戳

首页 > 解决方案 > 在 APIM 上禁用弱 TLS 密码套件

powershell - 在 APIM 上禁用弱 TLS 密码套件

问题描述

我刚刚发现我刚刚运行的报告中列出了一些弱密码：

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 128

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 128

TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) WEAK 256 TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) WEAK 128 TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) WEAK 256 TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) WEAK 128 TLS_RSA_WITH_AES_256_CBC_SHA (0x35) WEAK 256 TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) WEAK 128

我只配置了这些密码：

TLS 1.2（服务器优先顺序的套件）

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH secp384r1 (eq. 7680 bits RSA) FS 256

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) ECDH secp384r1 (eq. 7680 bits RSA) FS 128

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 128

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) ECDH secp384r1 (eq. 7680 bits RSA) FS WEAK 128

TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) 弱 256

TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) 弱 128

TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) 弱 256

TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) 弱 128

TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 弱 256

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 弱 128

应该从我的列表中删除哪些？

请注意，仅出现前两个强和扩眼报告的“弱”密码

标签： powershellazure-web-app-serviceazure-api-managementapi-management

解决方案

推荐阅读