Disabling TLS 1.1 & 1.3 on Yealink SIP-T31P

[Lilpombo]

Hello, everyone

So, how can I disabled TLSv1.1 and TLSv1.2 on my Yealink Phones? I want to use just TLSv1.3...


I added this line on the .CFG arquive:

static.security.default_ssl_method = 5

Number 5 activates TLSv1.2; I made a Nessus scan and the Telephone appointed vulnerabilities on TLSv1.1 and TLSv1.2 ciphers. So, the telephone is using the TLS 1.1, 1.2 and 1.3 too;


But... It doesn't works, the telephone didn't disabled TLSv1.1 for using only TLSv1.2; So, now I want do disable both... How can I do this? I didn't find this in the documentation...

[Lilpombo]

Hi,

Someone can help me with this?

[complex1]

(08-25-2022 09:22 PM)Lilpombo Wrote:  Hi,

Someone can help me with this?

Hi,

As far as I know, it is not possible to disable the TLS ciphers.
Parameter static.security.default_ssl_method = 6 selects the TLS 1.3 version to use for handshake negotiation between the phone and server.