SSL routines:tls_process_client_hello:version too low
    jriker1 
    nginx-forum at forum.nginx.org
       
    Tue Sep 29 23:45:31 UTC 2020
    
    
  
Thanks for the replies.  I can't debug right now as at a hotel and can't
turn on NGINX as if/when it fails I won't be able to access my servers again
so will do that later this week however right now I am on NGINX 1.14.1. 
Essentials Server 2016 is basically RD Gateway.  My configuration right now
in my own conf file is and the forum will kill my configuration unless there
is a way to do this:
server {
    listen 80;
    server_name remote.hidden.net;
    #       redirect http to https
    return 301 https://$server_name$request_uri;
    client_max_body_size 0;
    proxy_http_version 1.1;
    proxy_buffering off;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
    location / {
        proxy_pass http://192.168.0.1;
    }
}
server {
    listen 80;
    server_name sysmarthome.hidden.net;
    #       redirect http to https
    return 301 https://$server_name$request_uri;
    client_max_body_size 0;
    proxy_http_version 1.1;
    proxy_buffering off;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "Upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
    location / {
        proxy_pass http://192.168.0.50;
    }
}
upstream essentials {
  server 192.168.0.1:443;
  keepalive 32;
}
upstream homeassistant {
  server 192.168.0.50:8123;
  keepalive 32;
}
server {
  listen 443 ssl http2;
  server_name remote.*;
  ssl_certificate /config/user-data/ssl_chain_essentials.pem;
  ssl_certificate_key /config/user-data/ssl_chain_key_essentials.pem;
  client_max_body_size 0;
  proxy_http_version 1.1;
  proxy_buffering off;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "Upgrade";
  proxy_set_header Host $host;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
  location / {
    proxy_pass https://essentials;
  }
}
server {
  listen 443 ssl http2;
  server_name sysmarthome.*;
  ssl_certificate /config/user-data/ssl_chain_homeassistant.pem;
  ssl_certificate_key /config/user-data/ssl_chain_key_homeassistant.pem;
  client_max_body_size 0;
  proxy_http_version 1.1;
  proxy_buffering off;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection "Upgrade";
  proxy_set_header Host $host;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
  location / {
    proxy_pass https://homeassistant;
  }
}
Posted at Nginx Forum: https://forum.nginx.org/read.php?2,289572,289606#msg-289606
    
    
More information about the nginx
mailing list