AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
 View Only
  • 1.  AIX 7.1 sslv2 in fresh install

    Posted Sun July 01, 2018 08:28 AM

    Originally posted by: PE8R_baryaalai_noorzai


    i have fresh installed AIX 7.1.2.2 ,when i run Nessus scan the sslv2 and sslv3 detection vulnerability is there.

    How to solve please help.


    #AIX-Forum


  • 2.  Re: AIX 7.1 sslv2 in fresh install

    Posted Mon July 02, 2018 08:20 AM

    Originally posted by: AyappanP


    Get the latest openssl package from https://www-01.ibm.com/marketing/iwm/iwm/web/reg/download.do?source=aixbp&lang=en_US&S_PKG=openssl&cp=UTF-8&dlmethod=http  and install it.


    #AIX-Forum


  • 3.  Re: AIX 7.1 sslv2 in fresh install

    Posted Mon July 02, 2018 09:04 AM

    Originally posted by: PE8R_baryaalai_noorzai


    Hi AyappanP 

    I already installed the latest ssl fips compliant 20.13.102.1500 .

     


    #AIX-Forum


  • 4.  Re: AIX 7.1 sslv2 in fresh install

    Posted Mon July 02, 2018 09:45 AM

    Originally posted by: AyappanP


    Okay. Then you need to check which application is making use of it. Try to disable them and use TLS.


    #AIX-Forum


  • 5.  Re: AIX 7.1 sslv2 in fresh install

    Posted Mon July 02, 2018 11:22 PM

    Originally posted by: PE8R_baryaalai_noorzai


    It is used by Wbem-https.i added # to wbem-https in /etc/services ,restarted OS then i again run the scan and it is still there.

    Please guide me if i am wrong how to disable them and how to start using TLS.

     


    #AIX-Forum


  • 6.  Re: AIX 7.1 sslv2 in fresh install

    Posted Tue July 03, 2018 10:31 AM

    Originally posted by: AyappanP


    There has to be some settings with Wbem application which will disable sslv2 and sslv3. Please explore that. 


    #AIX-Forum