Bug#944006: nginx-extras missing TLS1.3

2019-11-05 Thread Florent CARRÉ
Hi, I use nginx-extras from buster (Debian official repository) nginx version: nginx/1.14.2 built with OpenSSL 1.1.1c 28 May 2019 (running with OpenSSL 1.1.1d 10 Sep 2019) TLS SNI support enabled configure arguments: --with-cc-opt='-g -O2 -fdebug-prefix-map=/build/nginx-tBUzFN/nginx-1.14.2=. -fs

Bug#944006: nginx-extras missing TLS1.3

2019-11-05 Thread Thomas Ward
Can you include the output of `nginx -V` please as well?  Part of TLS support is having a version of NGINX that is compiled against an OpenSSL in the repositories for the version of Debian you're using which supports TLS1.3, but that may not be the case in all releases of Debian. Thomas On

Bug#944006: nginx-extras missing TLS1.3

2019-11-02 Thread Florent CARRÉ
Package: nginx-extras Version: 1.14.2-2+deb10u1 When I modify to have exclusively TLS1.2 and TLS1.3, just TLS1.2 is available. Steps to reproduce : - switch to ssl_protocols TLSv1.2 TLSv1.3 - restart nginx - curl -v --tlsv1.3 mydomain.com I obtain : * TLSv1.3 (OUT), TLS handshake, Client hello (