 Rank: Newbie Joined: 2/2/2014(UTC) Posts: 10  Thanks: 2 times
|
I've got ScreenConnect 6.5 installation running on an Ubuntu 16.04 LTS server. It is properly configured for SSL and it does work correctly. However, the SSL installation fails miserably when tested with www.ssllabs.com I do not know for sure if this is due to ScreenConnect, Mono 3.0.4 provided by ScreenConnect, Linux, or bad configuration or my part. My suspicion is that it is a ScreenConnect/Mono issue. That version of Mono is quite old. Is it possible to improve the results through configuration? Or, is the only option to use a reverse proxy or other OS? Do Windows installations also fail these SSL tests?
|
|
|
|
|
|
 Rank: Administration Medals:  Joined: 8/18/2015(UTC) Posts: 94  Thanks: 9 times
Was thanked: 13 time(s) in 11 post(s)
|
Hi SCCurious, With the default installation, you'll see those kinds of results due primarily to the Mono implementation. The only way that you can currently improve it on a Linux server would be to install a reverse proxy like nginx, the installation of which is documented in this forum post: http://controlforum.conn...inux--TLS-and-Nginx.aspxWe have a couple of feature requests posted here that are asking for Mono to be updated to support disabling some protocols and updating it to be able to use TLS 1.2+, as well, you may want to upvote/comment on these (installing nginx also lets you use TLS 1.2+): https://control.product....ed-rc-cyphersssl-in-monohttps://control.product....or-freshdesk-integrationWindows installations don't fail the tests in the same way that you're seeing, as the Windows server installation uses HTTP.sys to serve webpages, and is configured a bit more securely by default in the OS; however, you can easily configure/harden Windows to pass the tests with flying colors using a tool like IISCrypto. Also as a side note, Control/SC is a native .NET application, so you'll typically see better performance on that OS vs. on Linux. IISCrypto: https://www.nartac.com/Products/IISCrypto/DownloadHope this helps! |
ConnectWise Control (ScreenConnect) Support Team |
 1 user thanked Michael L for this useful post.
|
|
|
|
Rank: Newbie Joined: 2/2/2014(UTC) Posts: 10 Thanks: 2 times
|
Thanks very much for the thorough response. This is just what I needed to know. Edit: That feature request has been pending for two years! It looks like there's no chance to make changes or update the Mono version. Edited by user Wednesday, May 16, 2018 7:24:58 PM(UTC)
| Reason: New info.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.
