Disable TSL vs 1.0

[BradV]

Just another method to disable TLS vs 1.0 in case it helps anyone?

# Extract the current TLS settings
TLSEnabled=$(curl --insecure \
   --header "X-API-Version: ${currentVersion}" \
   --header "auth: ${sessionID}" \
   --request GET ${OneView}/rest/security-standards/protocols | jq -r ".[] | .protocolName,.enabled")
declare -A TLS
i=0
for f in $(echo ${TLSEnabled}); do
   echo ${f}
   TLS[${i}]=${f}
   ((i++))
done
((i--))
# Create a function to disable TLS vs 1 and enable TLS vs 1.1 & 1.2
enableTLS () {
   TLSSet=$(curl --insecure \
      --header "content-type: application/json" \
      --header "X-API-Version: ${currentVersion}" \
      --header "auth: ${sessionID}" \
      --data '[ { "protocolName":"TLSv1", "enabled":false }, "protocolName":"TLSv1.1", "enabled":true, "protocolName":"TLSv1.2", "enabled":true }]' \
      --request PUT ${OneView}/rest/security-standards/protocols | jq -r '.'
}
#
for k in $(seq 0 2 ${i}); do
   l=$((${k} + 1))
   if [[ ${TLS[${k}]} == "TLSv1" && ${TLS[${l}]} == 'true" ]]; then
      echo "Have identified TLS v1 as being enabled."
      enableTLS
   elif [[ ${TLS[${k}]} == "TLSv1.1" ]]; then
      if [[ ${TLS[${l}]} == "false" ]]; then
         echo "Need to enable ${TLS[${k}]}"
         enableTLS
      else
         echo "${TLS[${k}]} is already enabled"
      fi
   elif [[ ${TLS[${k}]} == "TLSv1.2" ]]; then
      if [[ ${TLS[${l}]} == "false" ]]; then
         echo "Need to enable ${TLS[${k}]}"
         enableTLS
      else
         echo "${TLS[${k}]} is already enabled"
      fi
   else
      echo "TLS v1 is already disabled"
   fi
done

[ChrisLynch · Accepted solution]

Thanks for sharing, @BradV.