<HTML><BODY><p>nginx 1.13.5-1<br>openssl 1.1.0f-5</p><p>ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;<br> ssl_certificate /etc/nginx/ssl/chained.crt;<br> ssl_certificate_key /etc/nginx/ssl/ssl.key;<br> ssl_dhparam /etc/nginx/ssl/dhparam.pem;<br> ssl_prefer_server_ciphers on;<br> ssl_ciphers EECDH:+AES256:-3DES:RSA+AES:RSA+3DES:!NULL:!RC4;<br> ssl_ecdh_curve prime256v1;<br> ssl_session_cache shared:SSL:10m;<br> ssl_session_tickets off;<br> ssl_stapling on;<br> ssl_stapling_verify on;<br> ssl_trusted_certificate /etc/nginx/ssl/ocsp.crt;<br> resolver 8.8.8.8 8.8.4.4 valid=300s;<br> resolver_timeout 5s;<br> add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";<br> #add_header X-Frame-Options SOMEORIGIN;<br> add_header X-Content-Type-Options nosniff;<br> add_header X-XSS-Protection "1; mode=block;";</p><p>SSL тест сообщает:</p><table class="reportTable mceItemTable" style="border-collapse: collapse; width: 850px; margin: 0px 10px 0px 0px; padding: 0px; font-size: 12px; line-height: 20px; font-family: Arial, Helvetica, sans-serif; background-color: #fdfdfd;" data-mce-style="border-collapse: collapse; width: 850px; margin: 0px 10px 0px 0px; padding: 0px; font-size: 12px; line-height: 20px; font-family: Arial, Helvetica, sans-serif; background-color: #fdfdfd;"><thead><tr><td class="tableHead" style="color: #009ddf; font-weight: bold; padding-bottom: 5px; vertical-align: middle; border-bottom: 2px solid #c6d2d4; font-size: 13px;" colspan="2" data-mce-style="color: #009ddf; font-weight: bold; padding-bottom: 5px; vertical-align: middle; border-bottom: 2px solid #c6d2d4; font-size: 13px;">Protocols</td></tr></thead><tbody><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">TLS 1.3</td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">No</td></tr><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;"><font color="green">TLS 1.2</font></td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;"><font color="green">Yes</font></td></tr><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">TLS 1.1</td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">No</td></tr><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">TLS 1.0</td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">No</td></tr><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">SSL 3</td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">No</td></tr><tr class="tableRow"><td class="tableLeft" style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">SSL 2</td><td class="tableRight" style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;" data-mce-style="width: 50px; text-align: right; padding: 3px 0px; border-bottom: 1px solid #f0f0f0; vertical-align: middle;">No</td></tr></tbody></table><p><br data-mce-bogus="1"></p><p>Старые браузеры, соотв., поотваливались</p><p>Подскажите, пожалуйста, как вернуть поддержку старых версий TLS?<br><br>С уважением,<br>Максим Баштовой<br>www.sho0ter.com<br>mail@sho0ter.com</p></BODY></HTML>