Re: Disable SSL3 handshake errors

2014-10-13 Thread Maxim Dounin
Hello! On Sat, Oct 11, 2014 at 03:49:22PM +0200, Lorenzo Raffio wrote: > I disabled SSL3 in ssl_protocols (ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ). > So PCs with old browsers (example: IE on WinXP) fail to do the handshake > and I have my nginx logs full of these errors > ​​ > : > > SSL_do_handsh

Disable SSL3 handshake errors

2014-10-11 Thread Lorenzo Raffio
I disabled SSL3 in ssl_protocols (ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ). So PCs with old browsers (example: IE on WinXP) fail to do the handshake and I have my nginx logs full of these errors ​​ : SSL_do_handshake() failed (SSL: error:1408A10B:SSL routines:SSL3_GET_CLIENT_HELLO:wrong version numb