Welcome! Log In Create A New Profile

Advanced

Re: Client can't negotiate with TLS 1.0 and 1.1

Sergey Kandaurov
August 25, 2022 12:00PM
> On 25 Aug 2022, at 00:22, Fabiano Furtado Pessoa Coelho <fusca14@gmail.com> wrote:
>
> Hi...
>
> I'm using NGINX 1.22.0 with OpenSSL 3.0.5 in a Linux x86_64 server
> with one NIC and 2 IPs, with the following config:
>
> [...]
> Why I can't connect with TLS 1.0 or 1.1 on insecure.example.com?
>
> Is this an OpenSSL 3 issue? Does it work with OpenSSL 1.1.1?
>

TLS 1.0 and 1.1 are de-facto disabled by default in OpenSSL 3.0+.
See for more details: https://trac.nginx.org/nginx/ticket/2250

--
Sergey Kandaurov

_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org
Subject Author Posted

Client can't negotiate with TLS 1.0 and 1.1

Fabiano Furtado Pessoa Coelho August 24, 2022 04:24PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Maxim Dounin August 24, 2022 04:46PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Fabiano Furtado Pessoa Coelho August 24, 2022 08:20PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Igor Ippolitov August 24, 2022 04:48PM

Re: Client can't negotiate with TLS 1.0 and 1.1

noloader August 24, 2022 05:10PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Fabiano Furtado Pessoa Coelho August 24, 2022 08:38PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Sergey Kandaurov August 25, 2022 12:00PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Fabiano Furtado Pessoa Coelho August 25, 2022 01:02PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Lukas Tribus August 25, 2022 03:32PM

Re: Client can't negotiate with TLS 1.0 and 1.1

Fabiano Furtado Pessoa Coelho August 25, 2022 04:04PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 176
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready