How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?

rahulj · March 1, 2021, 6:52pm

Our InfoSec scans report that Kibana 7.0 service is supporting weak protocols and weak cipher suites. I am trying to find how to disable TLS 1.1 and below protocols and remove specific ciphers from Kibana service.

Any help you could provide will be greatly appreciated.

wylie · March 1, 2021, 8:08pm

Hi, welcome to the forums! Kibana supports the setting server.ssl.supportedProtocols:

Please note that TLS 1.3 is only supported in the very latest Kibana, 7.11.0

Topic		Replies	Views
How to disable kibana 7.17.3 TLS version 1.1 Kibana elastic-stack-security	2	489	June 9, 2022
Disallow tls1 and tls1.1 in kibana Kibana	2	540	April 13, 2017
Kibana Ports reported as vulnerability for TLS v 1.0 and 1.1 Kibana	2	1114	March 31, 2021
Disable tlsv1 and tlsv1.1 in kibana Kibana	2	2085	March 20, 2018
Unable to Set UP TLS for Kibana Kibana	3	237	February 23, 2024

How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?

Related topics