Configure TLS options for server

ChirpStack Application Server
1

Hello guys!

I need disable the use of TLSv1.0 and activate the protocol TLSv1.2 instead, and I don’t know configurate this on the lora-app-server.toml, somebody can I help me?

Thx

2

LoRa App Server does not expose low-level TLS configuration, the webserver uses the defaults as provided by the Go net/http webserver. One option would to run LoRa App Server without TLS and add a proxy (e.g. NGINX) which gives you a finer control of TLS configuration.

3

Hello guys!

I need disable and stop using DES, 3DES, IDEA or RC2 ciphers, and I don’t know configurate this on the lora-app-server.toml, somebody can I help me?

Thx

4

I’ve merged your topics. Please see the above suggestion.

5

Man, thank you for your help.

Do you know any doc with I can use to configure NGINX to control the TLS ?

Thx

6

See:

7

I will test and soon I give a response.

Thanks man,

8

Hello there!

I was able to configurate Nginx but how I can run LoRa App Server without TLS, it is some configuration on /etc/lora-app-server/lora-app-server.toml ?

9

Please see https://www.loraserver.io/lora-app-server/install/config/, the default configuration is (now) without TLS.

10

Hi,

What is the default configuration for the Go net/http webserver?
Example, I need to disabled TLS 1.0 and TLS 1.1 for the port 8000 and 8001.

11

The default ChirpStack configuration is without TLS disabled.