diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-09-06 09:56:06 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-09-06 09:56:06 +0200 |
| commit | 7546e249708de3e0b4bf8f89912caf73265edd60 (patch) | |
| tree | 5f934066d7091a704101ef426afb9bfd15a20b21 /data/templates/https/nginx.default.tmpl | |
| parent | 10814c4d3360598262e991e4b20768dfcde91d75 (diff) | |
| download | vyos-1x-7546e249708de3e0b4bf8f89912caf73265edd60.tar.gz vyos-1x-7546e249708de3e0b4bf8f89912caf73265edd60.zip | |
https: T2230: only support TLS1.2 and TLS1.3
Diffstat (limited to 'data/templates/https/nginx.default.tmpl')
| -rw-r--r-- | data/templates/https/nginx.default.tmpl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/data/templates/https/nginx.default.tmpl b/data/templates/https/nginx.default.tmpl index 2f8aa06c2..9d73baeee 100644 --- a/data/templates/https/nginx.default.tmpl +++ b/data/templates/https/nginx.default.tmpl @@ -39,6 +39,7 @@ server { # include snippets/snakeoil.conf; {% endif %} + ssl_protocols TLSv1.2 TLSv1.3; # proxy settings for HTTP API, if enabled; 503, if not location ~ /(retrieve|configure|config-file|image|generate|show|docs|openapi.json|redoc|graphql) { |