How Can I Disable TLS 1.0 and 1.1 in SystemLink Server RabbitMQ?

Security scanner software returns the vulnerability CVE-2025-32433 due to the use of TLS 1.0 and 1.1 on RabbitMQ. Can I configure SystemLink Server to not disable the affected TLS versions?

Follow these steps to modify the configuration of the RabbitMQ that SystemLink Server installs to disable client negotiation-- that should resolve the flagged vulnerability.

1. Open C:\ProgramData\National Instruments\Skyline\RabbitMQ\systemlink.config in a text editor, run as Administrator.
2. Locate the snippet:

   {ssl_options,
       [
         {certfile, "C:/ProgramData/National Instruments/Skyline/Certificates/rabbitmq-server/rabbitmq-server.cer"},
         {keyfile, "C:/ProgramData/National Instruments/Skyline/Certificates/rabbitmq-server/key/rabbitmq-server.key"},
         {verify, verify_none},
         {fail_if_no_peer_cert, false}
       ]},

3. Add {versions, ['tlsv1.2','tlsv1.3']}, after the {fail_if_no_peer_cert, false} line so the snippet above should become:

   {ssl_options,
       [
         {certfile, "C:/ProgramData/National Instruments/Skyline/Certificates/rabbitmq-server/rabbitmq-server.cer"},
         {keyfile, "C:/ProgramData/National Instruments/Skyline/Certificates/rabbitmq-server/key/rabbitmq-server.key"},
         {verify, verify_none},
         {fail_if_no_peer_cert, false},
         {versions, ['tlsv1.2','tlsv1.3']}
       ]},

4. Save and close the file.     
5. Reopen the file to verify that the changes were saved successfully.     
6. Restart the SystemLink Server computer.   
7. Run the security scanner again and see if the vulnerability disappears.