Disable TLSv1 in Nginx

To disable TLSv1 in nginx, add

ssl_protocols TLSv1.1 TLSv1.2;

in your server config.

if you are using letsencrypt SSL, edit file

Advertisement

vi /etc/letsencrypt/options-ssl-nginx.conf

Find

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

Replace with

ssl_protocols TLSv1.1 TLSv1.2;

Restart Nginx

service nginx restart

To verify, run

nmap --script ssl-enum-ciphers -p 443 DOMAIN.EXTN

This will list all supported SSL protocols.

nmap
Add a comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Keep Up to Date with the Most Important News

By pressing the Subscribe button, you confirm that you have read and are agreeing to our Privacy Policy and Terms of Use
Advertisement