Hi,
We have decided to drop support for SSLv3, TLS1 and TLS1.1 in FreedomBox. This will happen in version 21.9 which will reach all users in about 2 weeks time. This change should not effect you unless you are using a very old web client to access FreedomBox web server.
The following versions of client software will be needed to connect to FreedomBox web server:
- Firefox: 27
- Android: 4.4.2
- Chrome: 31
- Edge: 12
- IE: 11 (Win7),
- Java: 8u31
- OpenSSL: 1.0.1
- Opera: 20
- Safari: 9
Thanks to Joseph Nuthalapati @njoseph for driving and implementing the change.
Further reading:
-
Mozilla SSL Configuration Generator for ‘intermediate’ compatibility configuration: Security/Server Side TLS - MozillaWiki
-
IETF RFC 7525: rfc7525
-
NIST: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf