Re: In Nginx revers proxy unable to disable TLS1

2018-12-10 Thread Maxim Dounin
Hello! On Sun, Dec 09, 2018 at 11:56:33PM -0500, blason wrote: > Do you mean I need to mention in each and every reverse proxy stanza or in > default config? You have to configure ssl_protocols in the default server for the listening socket in question. As previously suggested, most simple sol

Re: In Nginx revers proxy unable to disable TLS1

2018-12-09 Thread blason
Hello, Do you mean I need to mention in each and every reverse proxy stanza or in default config? Is this right? [root@xx conf.d]# vi default.conf server { listen 80 default_server; #server_name ""; server_name _; return 444; ssl_protocols TLSv1.2; #charset k

Re: In Nginx revers proxy unable to disable TLS1

2018-12-03 Thread Maxim Dounin
Hello! On Sat, Dec 01, 2018 at 01:02:19AM -0500, blason wrote: > Hi Team, > > I have deployed nginx in reverse proxy mode and trying to disable TLS1 > and1.1 in configuation file but somehow it still shows when site is scanned > by SSLlabs. > > Any idea why? > > nginx version: nginx/1.10.1 >

In Nginx revers proxy unable to disable TLS1

2018-11-30 Thread blason
Hi Team, I have deployed nginx in reverse proxy mode and trying to disable TLS1 and1.1 in configuation file but somehow it still shows when site is scanned by SSLlabs. Any idea why? nginx version: nginx/1.10.1 ssl_prefer_server_ciphers On; ssl_protocols TLSv1.2; ssl_cip