TLS 1.3 and ssl_reject_handshake

graxlop nginx-forum at forum.nginx.org
Sat Dec 19 10:04:36 UTC 2020


Hello,

I'm using nginx 1.19.6 and when enabling "ssl_reject_handshake" in the top
server block, it will disable TLS 1.3 if no certificate is included in the
same server block or in the http block.

    server {
        listen       443 ssl;
        ssl_reject_handshake on;
    }

    server {
        listen       443 http2 ssl;
        server_name  test.com;
        root         /home/test;

        ssl_certificate      ssl/rsa.crt;
        ssl_certificate_key  ssl/rsa.key;
    }

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,290250,290250#msg-290250



More information about the nginx mailing list