Re: [webmin-l] mass update TLS settings for virtualmin servers?

Pat Erler <[email protected]>
Newsgroups gmane.comp.web.webmin.general
Message-ID <CAHk2_+jEPfK0Lbwu=8iG7C6gu4BMUEiA_Mi9v_LwAURypnukRg@mail.gmail.com>
jamie,

it's a bit more complicated then I thought to write the script. As all the
"editing config files" stuff is already implemented in webmin, is there a
way to utilize it? it's basically a  "check if a line beginning
with SSLProtocol exists, if yes, overwrite, if no, append (but within the
</VirtualHost> container". is there a wemin library/script that can be used?

in general, I wish there would be a bit more mass editing capabilities in
the virtualmin frontend, I need this quite often lately (letsencrypt,
spamassassin settings, ssl settings)

PAT

On Sun, Oct 16, 2016 at 11:09 PM Pat Erler <[email protected]> wrote:

> it's not that easy, as there are domains that already have a similar line
> in it (did the template change some time ago?)
>
> but sure, a little bit of perl will do, but wanted to be sure that there
> isn't a button for this already.
>
> On Sun, 16 Oct 2016, 20:01 Csere Mátyás, <[email protected]> wrote:
>
> How about just using your favourite text editor to do a search & replace
> on the apache.conf?
>
> On October 16, 2016 7:43:40 PM GMT+02:00, Jamie Cameron <
> [email protected]> wrote:
>
> The only way to do this currently in Virtualmin would be to update the
> Apache config template, disable the SSL website for all domains, and then
> re-enable it.
>
> But I wouldn't recommend this, as it may cause your SSL keys to be reset.
>
> On 16/Oct/2016 08:54 Pat Erler <[email protected]> wrote ..
>
> hi,
>
> I'd like to strengthen the SSL websites on our servers by disabling TLSv1.
> is thee a way to mass update all domains with a string like
>
> SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
>
>  ?
>
> --
>
>
>
>
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
> -
> Forwarded by the Webmin mailing list at [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot-
> Forwarded by the Webmin mailing list at
> [email protected]
> To remove yourself from this list, go to
> http://lists.sourceforge.net/lists/listinfo/webadmin-list
>
> --
>
>
> --

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

-
Forwarded by the Webmin mailing list at [email protected]
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.