How to disable TLSv1.0 on PostgreSQL (Port 5432)

Disclaimer: Please contact Sophos Professional Services if you require assistance with your specific environment.

The steps are:

1. Add or change ssl_ciphers in the file /opt/pmx6/postgres/var/data/postgresql.conf

ssl_ciphers = 'ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 AES256-GCM-SHA384 AES256-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 AES128-GCM-SHA256 AES128-SHA256'
    
2. Restart the database service (PostgreSQL) to make the configuration change effective.
   
   pmx-service restart postgresql

An example file is attached:

/cfs-file/__key/communityserver-discussions-components-files/303/postgresql.zip