/ Register

Welcome to Centmin Mod Community
Become a Member

Cloudflare TLSv1.3 only if using CloudFlare

Discussion in 'System Administration' started by BamaStangGuy, Oct 19, 2019.

Previous Thread Next Thread
Loading...
  1. Oct 19, 2019 #1
    BamaStangGuy

    BamaStangGuy Active Member

    669
    192
    43
    May 25, 2014
    Ratings:
    +272
    Local Time:
    3:56 PM
    Is there any downside to only allowing TLSv1.3 in nginx if behind CloudFlare?
     
  2. Oct 19, 2019 #2
    eva2000

    eva2000 Administrator Staff Member

    59,299
    12,510
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,143
    Local Time:
    6:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Not all clients support TLSv1.3 so you'd want TLSv1.2 + TLSv1.3 supported
     
  3. Oct 19, 2019 #3
    BamaStangGuy

    BamaStangGuy Active Member

    669
    192
    43
    May 25, 2014
    Ratings:
    +272
    Local Time:
    3:56 PM
    I planned to leave TLSv1.2 as the minimum in CloudFlare settings but shouldn't CloudFlare connect to my server via TLSv1.3 always anyways?
     
  4. Oct 19, 2019 #4
    eva2000

    eva2000 Administrator Staff Member

    59,299
    12,510
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,143
    Local Time:
    6:56 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    Yeah with Cloudflare Full or Full Strict SSL enabled (not Flexible SSL), Cloudflare will connect to your Centmin Mod Nginx origin via TLSv1.3 if Centmin Mod Nginx supports it which it does in 123.09beta01 and newer versions at least.
     
Previous Thread Next Thread
Loading...

.