Using TLS Protocols v1.2+ with Arc

To harden Arc for production environments, you can restrict Arc to only use TLS v1.2+ and a set of known-secure cipher suites.

Configuration

Open settings.yml in the Arc installation directory and add the following parameter:

Save the file and restart Arc for the change to take effect.

Supported Cipher Suites

When usesecuretls: true is set, Arc will only accept connections using these cipher suites:

Additional Information

More information about all available security settings can be found in the settings.sample.yml file located inside the Arc installation directory.

Related Pages

• Enabling TLS Protocols in Arc — full security settings reference

• HTTP Strict Transport Security (HSTS)

• Arc settings.yml File