Checks · TLS-002

TLS-002 · TLS below 1.2 accepted

Why it matters

Old TLS versions have known weaknesses and are rejected by current clients anyway.

How we detect it

A handshake that offers only old versions is accepted.

How we fix it

Disable TLS versions below 1.2 on the host.

Can it be fixed automatically? Instructions only

Related checks

• DB-006 · No backups or point-in-time recovery
• DB-007 · Backups never restore-tested
• TLS-001 · Certificate expires in under 14 days
• TLS-003 · HTTP not redirected to HTTPS