openssl 1.0.1 and tls1.1 and up

[Maxim Dounin]

Hello!

On Wed, Apr 16, 2014 at 06:35:43AM -0400, Nemesiz wrote:

> Strange things are happening.
> 
> nginx:
> ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
> 
> Results:
> 
> ssllabs.com:
> TLS 1.2 	No	
> TLS 1.1 	No
> TLS 1.0 	Yes
> SSL 3 	Yes
> SSL 2 	No
> 
> testssl.sh:
> 
> SSLv2     NOT offered (ok)
> SSLv3     offered 
> TLSv1     offered (ok) 
> TLSv1.1   not offered
> TLSv1.2   not offered
> 
> Looks like i can`t disable sslv3

It looks like you are testing something different, not nginx you 
are trying to configure.  Check what is actually listening on the 
ip:port you are testing.

-- 
Maxim Dounin
http://nginx.org/