Enabled tls 1.2

ivanjx · Mar 12, 2024 · ecc058c · ecc058c
1 parent 62e4979
commit ecc058c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/conf/mainline/nginx.conf b/conf/mainline/nginx.conf
@@ -41,7 +41,7 @@ http {
     keepalive_disable  msie6;
 
     ssl_dyn_rec_enable on;
-    ssl_protocols TLSv1.3;
+    ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ecdh_curve X25519:P-521:P-384;
     ssl_ciphers [ECDHE-ECDSA-CHACHA20-POLY1305|ECDHE-RSA-CHACHA20-POLY1305|ECDHE-ECDSA-AES256-GCM-SHA384|ECDHE-RSA-AES256-GCM-SHA384]:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
     ssl_prefer_server_ciphers on;