I have already configured a TLS version of Orthanc and am getting errors. The key issue is an “Association failed: TLS error: unsupported protocol,” as well as other issues. I will share the logs and my configuration below.i tried nmap and it shows the tls configured the nmap is given below also i troed minimumtlsversion 0 didnt work.
My Configuration and Logs
Generated Configuration File
JSON
{
"Plugins": [
"/usr/share/orthanc/plugins"
],
"Name": "Orthanc TLS on Azure",
"RemoteAccessAllowed": true,
"HttpDescribeErrors": true,
"AuthenticationEnabled": true,
"RegisteredUsers": {
"redacted": "redacted!",
"redacted": "redacted!",
"redacted": "redacted",
"redacted": "redacted"
},
"DicomAet": "ORTHANC_TLS",
"DicomPort": 4242,
"DicomServerEnabled": true,
"DicomAlwaysAllowStore": true,
"DicomCheckCalledAet": false,
"DicomCheckModalityHost": false,
"DicomTlsEnabled": true,
"DicomTlsCertificate": "/etc/letsencrypt/live/orthanc-rsa/fullchain.pem",
"DicomTlsPrivateKey": "/etc/letsencrypt/live/orthanc-rsa/privkey.pem",
"DicomTlsTrustedCertificates": "/etc/ssl/certs/ca-certificates.crt",
"DicomTlsRemoteCertificateRequired": false,
"DicomTlsMinimumProtocolVersion": 3,
"DicomTlsCiphersAccepted": [
"ECDHE-RSA-AES128-GCM-SHA256",
"ECDHE-RSA-AES256-GCM-SHA384",
"DHE-RSA-AES128-GCM-SHA256",
"DHE-RSA-AES256-GCM-SHA384",
"AES128-GCM-SHA256",
"AES256-GCM-SHA384",
"ECDHE-RSA-CHACHA20-POLY1305",
"DHE-RSA-CHACHA20-POLY1305",
"ECDHE-RSA-AES128-SHA256",
"ECDHE-RSA-AES256-SHA384",
"AES128-SHA256",
"AES256-SHA256",
"DHE-RSA-AES128-SHA256",
"DHE-RSA-AES256-SHA256",
"ECDHE-RSA-AES128-SHA",
"ECDHE-RSA-AES256-SHA",
"AES128-SHA",
"AES256-SHA",
"DHE-RSA-AES128-SHA",
"DHE-RSA-AES256-SHA"
],
"LogImportedResources": true,
"LogExportedResources": true,
"StorageCompression": true,
"MaximumPatientCount": 0,
"MaximumStorageSize": 0,
"StorageDirectory": "/mnt/orthanc-storage",
"HttpsCACertificates": "/etc/ssl/certs/ca-certificates.crt",
"DicomWeb": {
"Enable": true,
"EnableQido": true,
"EnableStow": true,
"EnableWado": true,
"Root": "/dicom-web/"
},
"OrthancExplorer2": {
"Enable": true,
"IsDefaultOrthancUI": true
},
"PostgreSQL": {
"EnableIndex": true,
"EnableStorage": false,
"Host": "redacted",
"Port": 5432,
"Database": "orthanc_tls_prod_db",
"Username": "redacted",
"Password": "redacted",
"EnableSsl": true,
"Lock": false
},
"DicomModalities": {
"SLICER_TLS": {
"AET": "RADIANT",
"Host": "182.184.225.250",
"Port": 11112,
"UseDicomTls": true
},
"REMOTE_DICOMPACS": {
"AET": "DICOMPACS",
"Host": "24.73.5.39",
"Port": 104,
"UseDicomTls": true
},
"BRHDGEMRMRI_TLS": {
"AET": "BRHDGEMRMRI",
"Host": "10.131.120.81",
"Port": 4243,
"UseDicomTls": true
},
"BRHDMR1M001A_TLS": {
"AET": "BRHDMR1M001A",
"Host": "10.131.121.84",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGECT64ED_TLS": {
"AET": "BRHDGECT64ED",
"Host": "10.131.120.90",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGECT64CT_TLS": {
"AET": "BRHDGECT64CT",
"Host": "10.131.120.95",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGECT16ER_TLS": {
"AET": "BRHDGECT16ER",
"Host": "10.131.120.96",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGE9CT001_TLS": {
"AET": "BRHDGE9CT001",
"Host": "10.137.74.105",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGE8CT001_TLS": {
"AET": "BRHDGE8CT001",
"Host": "10.139.202.42",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGERCT001_TLS": {
"AET": "BRHDGERCT001",
"Host": "10.139.246.46",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGEWCT001_TLS": {
"AET": "BRHDGEWCT001",
"Host": "10.145.66.41",
"Port": 4243,
"UseDicomTls": true
},
"BRHDGELCT001_TLS": {
"AET": "BRHDGELCT001",
"Host": "10.145.58.41",
"Port": 4243,
"UseDicomTls": true
},
"BRHDEDNM003A_TLS": {
"AET": "BRHDEDNM003A",
"Host": "10.141.245.136",
"Port": 4243,
"UseDicomTls": true
},
"BRHDRADWORKS_TLS": {
"AET": "BRHDRADWORKS",
"Host": "10.131.120.146",
"Port": 4243,
"UseDicomTls": true
},
"CSBHRD1M001B_TLS": {
"AET": "CSBHRD1M001B",
"Host": "10.131.104.146",
"Port": 4243,
"UseDicomTls": true
},
"CSBHGERD01CT_TLS": {
"AET": "CSBHGERD01CT",
"Host": "10.131.104.146",
"Port": 4243,
"UseDicomTls": true
},
"BRHDMKVAPPS02V1_TLS": {
"AET": "BRHDMKVAPPS02V1",
"Host": "10.139.8.248",
"Port": 4243,
"UseDicomTls": true
}
},
"Gdcm": {
"Throttling": 4,
"RestrictTransferSyntaxes": [
"1.2.840.10008.1.2.4.90",
"1.2.840.10008.1.2.4.91",
"1.2.840.10008.1.2.4.92",
"1.2.840.10008.1.2.4.93"
]
}
}