Beta Branch deprecate Nginx TLSv1.0 & TLSv1.1 by default in 123.09beta01

deprecate Nginx TLSv1.0 & TLSv1.1 by default in 123.09beta01

---

- TLSv1.0 & TLSv1.1 have been deprecated by browsers and OSes for ages now as they are less secure than TLSv1.2 and TLSv1.3. SSL Labs tests also cap grade score to B if TLSv1.0 & TLSv1.1 are enabled SSL Server Test (Powered by Qualys SSL Labs)
- enable SSL_PROTOCOL_MODERN='y' by default in 123.09beta01 so that Centmin Mod Nginx HTTPS vhost sites will default to minium TLSv1.2 version with max TLSv1.3 if client supports it.
- For existing Centmin Mod installs, run cmupdate to update your local Centmin Mod code, then run centmin.sh menu once and exit and then restart Nginx server for changes to take effect. Details at https://community.centminmod.com/threads/add-ssl_protocol_modern-variable-in-123-09beta01.19702/

Continue reading...

123.09beta01 branch

• Branch: GitHub - centminmod/centminmod at 123.09beta01
• Commit History: Commits · centminmod/centminmod