It will only disable access for legacy browsers and clients including Internet Explorer 10 and its previous versions which are already deprecated. The Standard profile offers a good balance between security and reach. If the profile is set to Standard, only modern ciphers with no known issues and both TLS 1.2 and 1.3 will be accepted.

Selecting this profile will restrict access to modern browsers and clients which support TLS 1.3. If the profile is set to Modern, only strong ciphers and TLS 1.3 will be accepted. But it is highly recommended to let it set to its default and recommended value.

The displayed dialog allows also changing the SSL/TLS profile. With SNI, cetificate negotiation became possible and legacy SSL restrictions are now lifted.

The original SSL protocol limited each pair of IP address and port to have a single certificate. SNI stands for Server Name Indication as is an extension to the SSL/TLS protocol to allow virtual hosting on SSL/TLS. In the displayed dialog, SNI support (which is enabled by default) can be disabled. SSL/TLS Parameters: Detailed parameters of the SSL/TLS secure layer are accessible by pressing Edit. When empty or set to *, the host listens for incoming connections on all available network interfaces (which is the default and the recommended setting.) to open the advanced parameters dialog which contains the following fields:īind to IP Address: The IP address of the network interface that the host should listen on. Refer to the ' Patterns Format' appendix for more information about patterns.Īdvanced Parameters: Press Edit. A host name in this table can also be a pattern such as *. Names may contain non-Latin characters ans Abyss Web Server supports International Domain Names (IDN) natively. If the table is empty, the host is not associated with a specific name and will answer any request that reaches it on the configured port. Host Names: This table contains the names associated with the current host. This field is available if Certificate Type is set to From ACME account. This field is available only if Certificate Type is set to From certificate store.ĪCME Account: The name of the ACME account which ACME-Bot uses to request or renew a certificate for secure connections with the current host. Otherwise, visitors' browsers will report a warning about mismatched names on every access to the host. Note that the certificate's Host Name (Common Name) should be equal to or match with the names associated with the current host. This field is not available if the Protocol is set to HTTP only.Ĭertificate: The name of certificate from the certificate store that is used for secure connections with the current host. The certificate can be retrieved from the certificate store (a self-signed certificate or a certificate from a certificate authority) or generated by an ACME server using a declared ACME account. This field is not available if the Protocol is set to HTTP only.Ĭertificate Type: The origin of the certificate that is used for secure connections with the current host. HTTPS Port: The port on which the host waits for secure HTTPS connections. This field is not available if the Protocol is set to HTTPS only. HTTP Port: The port on which the host waits for HTTP connections. In such a situation, you can configure some virtual paths to be accessible on secure connections only by adding them to the Exclusively Serve On HTTPS table. The host can be configured to serve content on both secure and non-secure connections by setting Protocol to HTTP+HTTPS. To have the host serve content over secure connections only using SSL/TLS, set it to HTTPS. Protocol: Set it to HTTP to configure the host to use normal non-secure connections. If it is a relative path then it isĬonsidered as a subpath of the server root. Documents Path: The path of the web site files.

Abyss web server password reset