Re: Client can't negotiate with TLS 1.0 and 1.1

WOW! It worked!!! THANKS!!! I configured my NGINX with "ssl_ciphers ...:@SECLEVEL=0;". Thank you Thank you!!! On Thu, Aug 25, 2022 at 4:31 PM Lukas Tribus wrote: > > Hello, > > > the *client* you are using to test this is just as important. Adjust > CipherString in /etc/ssl/openssl.cnf or th

Re: Client can't negotiate with TLS 1.0 and 1.1

Hello, the *client* you are using to test this is just as important. Adjust CipherString in /etc/ssl/openssl.cnf or the client parameters (-cipher "DEFAULT:@SECLEVEL=0") too. ~# grep SEC /etc/ssl/openssl.cnf CipherString = DEFAULT:@SECLEVEL=2 ~# ~# openssl s_client -connect www.google.com:443 -t

Re: Client can't negotiate with TLS 1.0 and 1.1

Hi... On Thu, Aug 25, 2022 at 12:59 PM Sergey Kandaurov wrote: > > > > On 25 Aug 2022, at 00:22, Fabiano Furtado Pessoa Coelho wrote: > > > > Hi... > > > > I'm using NGINX 1.22.0 with OpenSSL 3.0.5 in a Linux x86_64 server > > with one NIC and 2 IPs, with the following config: > > > > [...] > > Wh

Re: Client can't negotiate with TLS 1.0 and 1.1

> On 25 Aug 2022, at 00:22, Fabiano Furtado Pessoa Coelho > wrote: > > Hi... > > I'm using NGINX 1.22.0 with OpenSSL 3.0.5 in a Linux x86_64 server > with one NIC and 2 IPs, with the following config: > > [...] > Why I can't connect with TLS 1.0 or 1.1 on insecure.example.com? > > Is this a