Weird proxy_ssl_protocol ordering

bclod nginx-forum at
Fri Jan 13 19:40:35 UTC 2017


Thanks for the detailed reply!  In the organization I work for I see most
legacy backends support TLSv1 or support both TLSv1.1/1.2.

Since every backend that supports TLSv1.1 also supports TLSv1.2 (from my org
so far) I thought I was doing a small favor by leaving TLSv1.1 out of the

I've changed the config to read "TLSv1.2 TLSv1.1 TLSv1" and will never ever
look back.

Thanks again!!!


Posted at Nginx Forum:,271984,271987#msg-271987

More information about the nginx mailing list