nginx ssl_protocols 配置问题请教

› NGINX

› NGINX Trac

› 3rd Party Modules

› Security Advisories

› CHANGES

› OpenResty

› ngx_lua

› Tengine

在线学习资源

› NGINX 开发从入门到精通

NGINX Modules

› ngx_echo

This topic created in 940 days ago, the information mentioned may be changed or developed.

修改 nginx ssl_protocols 配置只支持 TLSv1.2 ，但是检查出域名还是有 TLSv1.1 ，配置如下，该配置文件还有很多其它域名配置

listen 443 ssl;
server_name XXX;
allow all;
ssl_certificate /etc/nginx/cert/xxx.com.pem;
ssl_certificate_key /etc/nginx/cert/xxx.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!3DES;
#ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_protocols TLSv1.2;
ssl_prefer_server_ciphers on;

4 replies • 2023-10-20 16:12:36 +08:00