Enable TLS v1.2 for connection to Sophos Cloud?

Question

Hi there, 
 Had a look at /opt/sophos-av/log/sophosav/sophosmgmtd.log: 
 2017-05-08 15:30:47,827 INFO SophosHTTPS: SSL Connection with ('ECDHE-RSA-AES128-GCM-SHA256', 'TLSv1/SSLv3', 128) cipher 2017-05-08 15:30:47,828 INFO sophosmgmtd.mcsclient.MCSConnection: Successfully connected to mcs-cloudstation-eu-central-1.prod.hydra.sophos.com:443 via 10.x.x.xx:8080 
 
 We need TLS v1.2 for security certification. Nothing in the docs says how to do this. 
 Thanks.

DouglasLeeder · Accepted Answer

Hi, 
 sophosmgmtd always uses TLS v1.2 for communications to Sophos Central. ECDHE-RSA-AES128-GCM-SHA256 is a TLSv1.2-only cipher so it is certainly using TLSv1.2 and the code forces the SSL context to only use TLS v1.2 as well. 
 Thanks, 
 Douglas.

DouglasLeeder · Answer

Hi, 
 Are you worried about the 'TLSv1/SSLv3' part of the cipher log line? 
 That isn't the protocol in use, it is from SSLSocket.cipher() ( https://docs.python.org/2/library/ssl.html#ssl.SSLSocket.cipher ) - it is "the version of the SSL protocol that defines its (the cipher's) use". 
 Thanks, 
 Douglas.