On my company we are trying to be compatible with tls 1.3 protocol, but we aren't able to achieve it, for now we use 1.2 version of the protocol.
For updating it I've saw that it's enough by adding this line:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
on our nginx conf file but it is not working, moreover it gives the 403 I've mentionated earlier by doing this, without this lane it works like a charm.
This is our whole configuration file:
server {
listen 81 ssl http2 default_server;
listen [::]:81 ssl http2 default_server;
server_name test.testhost.es;
ssl_certificate conf.d/x-certificates/wildCard_x.crt;
ssl_certificate_key conf.d/x-certificates/wildCard_x.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root /usr/share/nginx/html;
index index.html index.htm;
try_files $uri $uri/ /index.html =404;
}
}
What i'm doing wrong? Thanks in advance!
question from:
https://stackoverflow.com/questions/65938721/403-forbidden-when-changing-ssl-protocols-on-nginx 与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…