How to disable tlsv1 in nginx?

Question

Nginx

Trying to disable tlsv1 in nginx.
Left only the line: But continues to work.
ssl_protocols TLSv1.1 TLSv1.2;

openssl s_client -tls1 -connect example.com:443 < /dev/null

If I add default_server Then tlsv1 is disabled, but other sites for which I do not want to disable this protocol stop working.
listen XX.XX.XX.XX:443 ssl default_server;

Answer 1

You need to configure SSL in a complex way. Generate a config in accordance with best practices, for example, here - https://mozilla.github.io/server-side-tls/ssl-conf...
In your case, apparently, the matter is in the absence of ssl_prefer_server_ciphers.