Weird proxy_ssl_protocol ordering

bclod nginx-forum at forum.nginx.org
Fri Jan 13 19:40:35 UTC 2017


Maxim,

Thanks for the detailed reply!  In the organization I work for I see most
legacy backends support TLSv1 or support both TLSv1.1/1.2.

Since every backend that supports TLSv1.1 also supports TLSv1.2 (from my org
so far) I thought I was doing a small favor by leaving TLSv1.1 out of the
scope.

I've changed the config to read "TLSv1.2 TLSv1.1 TLSv1" and will never ever
look back.

Thanks again!!!

Brandon

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,271984,271987#msg-271987



More information about the nginx mailing list