How to fix TLS v1.2 issues? (SSL Lab)
Solution 1:
The question is not entirely clear, but I'm assuming it boils down to guidance regarding configuration of appropriate TLS cipher suites, etc.
That is a question that is tricky to answer well as best practice continues to evolve over time, but I can point to some good resources:
-
Mozilla makes their own Server Side TLS configuration guidance public, accompanied with a configuration generator for many common services.
What is particularly useful here is that not only do they have very clear configuration guidance for multiple levels of legacy compatibility, they also document their rationale behind these suggested configurations. -
Qualys does not only provide their quite popular SSL Labs Server Test (which the question appears to have a screenshot from), but also documentation with TLS Deployment Best Practices.
I would say that the Qualys document goes broader with overall deployment considerations, while the Mozilla document is focused specifically on detailed configuration considerations. Both are worthwhile and complement each other, although I get the impression that the Mozilla guide is more directly aimed at what you are asking for.