From 41b5ad3967af5288625fae8d684c42f15f7484e3 Mon Sep 17 00:00:00 2001 From: Matt Palmer Date: Thu, 5 Apr 2018 14:52:16 +1000 Subject: [PATCH] Remove TLS 1.0/1.1 support https://meta.discourse.org/t/as-of-october-31-2018-microsoft-office-365-will-no-longer-support-tls-1-0-and-1-1/80479/11?u=mpalmer --- templates/web.ssl.template.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/web.ssl.template.yml b/templates/web.ssl.template.yml index e5f6f8b..a76ae0d 100644 --- a/templates/web.ssl.template.yml +++ b/templates/web.ssl.template.yml @@ -18,7 +18,7 @@ run: from: /listen 80;\s+gzip on;/m to: | listen 443 ssl http2; - ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_protocols TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA; ssl_prefer_server_ciphers on; ssl_ecdh_curve secp384r1:prime256v1; -- 2.25.1