H
H
hodik2014-01-14 16:25:31
OpenSSL
hodik, 2014-01-14 16:25:31

How to enable TLSv1.1 and TLSv1.2 support on Ubuntu 12.04?

Installed nginx 1.4.4:

ssl_protocols  TLSv1.1 TLSv1.2 TLSv1 SSLv3;
  ssl_ciphers  DHE-RSA-CAMELLIA256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:DES-CBC3-SHA:!ADH:!aNULL;

and set up SSL for the host. But, unfortunately, the connection is still established via the SSLv3 protocol and occasionally via TLSv1. This is necessary to activate perfect forward secrecy .

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexander Chekalin, 2014-04-12
@achekalin

Except
it is necessary, as far as I remember,
it indicates that server ciphers are more priority than client ones.
And how is nginx itself assembled: by hand, or from the repository?

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question