AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only
Back to discussions
Expand all | Collapse all

How to disable SSL on port 5989 in AIX?

  • 1.  How to disable SSL on port 5989 in AIX?

    Posted Thu August 17, 2017 06:02 PM

    Originally posted by: aditya.saxena


    I need to disable SSL as I am getting the following vulnerability in a scan report: SSLv3 is enabled on this host.  SSLv3 has been deprecated, and due to pervasive security flaws, is not recommended for use.

    And the action that I am getting as a suggestion is: Disable SSLv3.  Replace or reconfigure applications that use SSLv3 to only use TLSv1 or newer protocols.

    The ports that it is showing on is 5989. Please help me.



  • 2.  Re: How to disable SSL on port 5989 in AIX?

    Posted Wed August 23, 2017 01:00 PM

    Originally posted by: stuart.haddock


    This is what I found:

    You need to fine and evaluate the service that is listening on that port and disable if its not needed.

    https://www.ibm.com/developerworks/community/forums/html/topic?id=77777777-0000-0000-0000-000014309940

    Disable a protocol:

    http://www-01.ibm.com/support/docview.wss?uid=isg3T1021439

    http://www.unix.com/aix/266025-can-i-get-some-clue-disabling-sslv1-v3-tls1-0-aix.html

    https://www.experts-exchange.com/questions/28088153/How-do-I-Disable-SSL-v2-on-an-AIX-System.html

     

    You can add a firewall rule(AIX filters):



    https://www.ibm.com/developerworks/aix/library/au-aixfiltering/index.html