TLS 1.0 allowed for Control Center connection regardless of cc-config set-min-tls-level in Messaging Gateway version 10.7.5

Products

• Messaging Gateway

Issue/Introduction

After upgrading to Messaging Gateway 10.7.5, you find that TLS version 1.0 is allowed even when configured to only use a stronger protocol version.

Environment

Release  : 10.7.5

Component  : Default-Sym

Cause

Internal changes to the Control Center in 10.7.5 caused the set-min-tls-level configuration to be ignored.

Resolution

This issue has been addressed with patch 10.7.5-291. For information on applying patch updates to the Messaging Gateway, please see the following article:

Installing and removing patches for Messaging Gateway

Note: After applying patch 10.7.5-291 or 10.7.5-292 to resolve the minimum TLS level issue, you must manually reset the control center TLS level to finalize the fix. This is discussed in the following article:

Control Center accepts TLS1 after application of SMG patch 10.7.5-291