Enable TLS 1.1

thomasbennett

How can I enable TLS 1.1 but keep 1.2 and 1.3? I don't know what to put as the ssl_chiphers in /etc/nginx/nginx.conf.

VirtuBox

Hello thomasbennett,
here a working configuration with TLSv1.1 for Nginx :

    # old configuration
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA;
    ssl_prefer_server_ciphers on;

Source : https://ssl-config.mozilla.org/#server=nginx&server-version=1.17.0&config=old

thomasbennett

No one else having this issue? I'm seeing the issue occasionally when ShipStation tries to connect to a WooCommerce store. If I disable TLS 1.3 and TLS 1.2 and copy/paste some code to open TLS 1.1 it works...