As of UW release 6.5.8.28, UW now supports TLS version 1.3. The following configuration is recommended for systems running 6.5.8.28, and higher.
(For older releases of UW, please see this
article.)
/stoneware/config/excludeProtocols
TLSv1
TLSv1.1
# Uncomment the following line, to also disable TLS 1.2
#TLSv1.2
SSL
SSLv2
SSLv2Hello
SSLv3
/stoneware/config/includeProtocols - leave this file empty
/stoneware/config/allowCiphers
TLS_DHE_RSA.*
TLS_ECDHE.*
TLS_AES_128_GCM_SHA256
TLS_AES_256_GCM_SHA384
TLS_CHACHA20_POLY1305_SHA256
/stoneware/config/denyCiphers
.*NULL.*
.*RC4.*
.*MD5.*
.*DES.*
.*DSS.*
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Any changes to these files requires webNetwork to be shut down and started back up.