nginx ssl

Disable TLSv1 in Nginx

by
nmap

To disable TLSv1 in nginx, add ssl_protocols TLSv1.1 TLSv1.2; in your server config. if you are using letsencrypt SSL, edit file vi /etc/letsencrypt/options-ssl-nginx.conf Find ssl_protocols TLSv1 TLSv1.1 TLSv1.2; Replace with ssl_protocols TLSv1.1 TLSv1.2; Restart Nginx service nginx restart To verify, run nmap –script ssl-enum-ciphers -p 443 DOMAIN.EXTN This will list all supported SSL protocols. Nginx … Read more

Nginx SSL Configuration

by

Let’s say we have an Nginx virtual host like following To make it SSL enabled, add the following to the server entry. ssl_client_certificate introduced in Nginx version 1.19.4. If you are using an older version, add your ca-bundle after SSL certificate. Example SSL protocols dhparam Create In your nginx config, add Redirect Traffic to SSL … Read more