Want to subscribe to topics you're interested in?
Become a Member

Master Branch add SSL_PROTOCOL_MODERN variable in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, May 12, 2020.

  1. eva2000

    eva2000 Administrator Staff Member

    58,895
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    9:59 PM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    add SSL_PROTOCOL_MODERN variable in 123.09beta01

    By default Nginx supports SSL protocols TLSv1.0, TLSv1.1, TLSv1.2 and TLSv1.3 (when used with OpenSSL 1.1.1 or BoringSSL). TLSv1.0 and TLSv1.1 will be deprecated by web browsers over the course of this year. So setting SSL_PROTOCOL_MODERN='y' in persistent config file /etc/centminmod/custom_config.inc prior to centmin.sh menu option 4 nginx recompiles/updates and/or running centmin.sh menu option after a cmupdate to pull and sync this commit update with your local Centmin Mod code, will edit /usr/local/nginx/conf/ssl_include.conf include file which is added to every Nginx vhost generated config file and remove TLSv1.0 and TLSv1.1 and leave only TLSv1.2 or TLSv1.2 + TLSv1.3 (when using OpenSSL 1.1.1 or BoringsSSL)

    Continue reading...

    Centmin Mod Github Master branch

    Master branch is where most recent commits are made as at May 24, 2015.