Hawkeye Server SSL customization

The Hawkeye Server utilizes SSL in its operations. The user can configure Hawkeye server to use only the highest protocols. The configuration file, /etc/nginx/snippets/hawkeye-ssl.conf , can only be edited with privilege. Use su – to escalate privledge.

The example below will force Hawkeye Server to only use TLS 1.2 and 1.3.

 

# vi /etc/nginx/snippets/hawkeye-ssl.conf

ssl_ciphers HIGH:!3DES:!aNULL:!MD5:!SEED:!IDEA;

ssl_protocols TLSv1.2 TLSv1.3;

 

# select our certificates.

# We default to the ones created

# during install (snakeoil),

# but should be replaced

# with proper customer certs as:

#ssl_certificate <path_to_pem>;

#ssl_certificate_key <path_to_key>;

include snippets/snakeoil.conf;

 

To apply the changes please run that hawkeyeServices command.

 

After the service restarts, the Hawkeye email client will be blocked from using SSL and is forced to only allow TLS. You have to modify the email preferences to use TLS. This also applies to web browsers and all communication on port 443.