Welcome! Log In Create A New Profile

Advanced

Re: Enabling TLS 1.0 / 1.1 on Debian Testing

November 16, 2018 04:48AM
Maxim Dounin Wrote:
-------------------------------------------------------
> > [...]
>
> [...]
>
> Upgrade to nginx 1.15.3+, this problem is expected to be addressed by
> this commit:
>
> http://hg.nginx.org/nginx/rev/7ad0f4ace359
>
> Alternatively, you can modify (and/or disable via the OPENSSL_CONF
> environment variable specifically for nginx) system-wide OpenSSL
> configuration file which disables protocols before TLS 1.2.
>
> --
> Maxim Dounin
> http://mdounin.ru/


Thank you Maxim. Solved by editing /etc/ssl/openssl.conf

[system_default_sect]
-MinProtocol = TLSv1.2
+MinProtocol = TLSv1

I understand about OPENSSL_CONF env var just for nginx - but for me system wide is fine too.

Thanks again!
Subject Author Posted

Enabling TLS 1.0 / 1.1 on Debian Testing

kmansoft November 15, 2018 12:17PM

Re: Enabling TLS 1.0 / 1.1 on Debian Testing

Maxim Dounin November 15, 2018 01:26PM

Re: Enabling TLS 1.0 / 1.1 on Debian Testing

kmansoft November 16, 2018 04:48AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 84
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready