Welcome to ShenZhenJia Knowledge Sharing Community for programmer and developer-Open, Learning and Share
menu search
person
Welcome To Ask or Share your Answers For Others

Categories

On my company we are trying to be compatible with tls 1.3 protocol, but we aren't able to achieve it, for now we use 1.2 version of the protocol.

For updating it I've saw that it's enough by adding this line:

 ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

on our nginx conf file but it is not working, moreover it gives the 403 I've mentionated earlier by doing this, without this lane it works like a charm.

This is our whole configuration file:

server {
  listen 81 ssl http2 default_server;
  listen       [::]:81 ssl http2 default_server;
  server_name  test.testhost.es;
  
  ssl_certificate      conf.d/x-certificates/wildCard_x.crt;
  ssl_certificate_key  conf.d/x-certificates/wildCard_x.key;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  ssl_session_cache shared:SSL:1m;
  ssl_session_timeout  10m;
  ssl_ciphers HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;

  location / {
    root /usr/share/nginx/html;
    index index.html index.htm;
    try_files $uri $uri/ /index.html =404;
  }
}

What i'm doing wrong? Thanks in advance!

question from:https://stackoverflow.com/questions/65938721/403-forbidden-when-changing-ssl-protocols-on-nginx

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
thumb_up_alt 0 like thumb_down_alt 0 dislike
304 views
Welcome To Ask or Share your Answers For Others

1 Answer

Waitting for answers

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
thumb_up_alt 0 like thumb_down_alt 0 dislike
Welcome to ShenZhenJia Knowledge Sharing Community for programmer and developer-Open, Learning and Share

548k questions

547k answers

4 comments

86.3k users

...