Reputation:
I am running an Angular app inside app engine. Recently this application was PEN tested and one of the issues that came up was around TLS1.0 and TLS 1.1 in use.
The recommendation from these results are to disable all TLS protocols before TLS1.2. Only use cipher suites considered cryptographically strong.
The application presently doesnt have a custom domain and is purely hosted on .appspot.com
How do I achieve this? Would I need to use a custom domain for this? I've tried read around but feel a little out of my comfort zone with this.
Thanks
Upvotes: 1
Views: 1123
Reputation: 996
To achieve that you should contact directly GCP's Support Team.
Bear in mind that this is not supported within the free trial support package.
If you don't have a Support Plan, upgrading to the Development plan with only 1 user would be enough to open a support case and request TLS changes for the needed domains.
Upvotes: 1