CODEWITHSUNDEEP
google-app-engine
NNN
NNN

Reputation: 563

Disable weak cipher for Google Cloud App engine custom domain website

I have set up a custom domain website using a PHP Google Cloud App engine. After some third party security testing i've been advised to disable the use of cipher suite DES-CBC3-SHA (TLS_RSA_WITH_3DES_EDE_CBC_SHA).

I'm trying to find out if its possible to disable this for a Google PHP App engine? Most of what I can find online either doesn't answer this particular question or is somewhat out of date.

I found this post useful, Can Google App Engine Java support TLS>1.0 . This suggests it's not possible, however it doesn't actually answer the question, it just concludes that if its good enough for google it should be fine.

Upvotes: 2

Views: 1881

Answers (1)

arudzinska
arudzinska

Reputation: 3329

Currently it is not possible to disable this cipher suite for a custom domain on the user end. However, it is possible to file a ticket to the GCP support and ask them to do this for your domain.

Upvotes: 4

Related Questions