summaryrefslogtreecommitdiff
path: root/data/templates/https/nginx.default.tmpl
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-09-06 09:56:06 +0200
committerChristian Poessinger <christian@poessinger.com>2021-09-06 09:56:06 +0200
commit7546e249708de3e0b4bf8f89912caf73265edd60 (patch)
tree5f934066d7091a704101ef426afb9bfd15a20b21 /data/templates/https/nginx.default.tmpl
parent10814c4d3360598262e991e4b20768dfcde91d75 (diff)
downloadvyos-1x-7546e249708de3e0b4bf8f89912caf73265edd60.tar.gz
vyos-1x-7546e249708de3e0b4bf8f89912caf73265edd60.zip
https: T2230: only support TLS1.2 and TLS1.3
Diffstat (limited to 'data/templates/https/nginx.default.tmpl')
-rw-r--r--data/templates/https/nginx.default.tmpl1
1 files changed, 1 insertions, 0 deletions
diff --git a/data/templates/https/nginx.default.tmpl b/data/templates/https/nginx.default.tmpl
index 2f8aa06c2..9d73baeee 100644
--- a/data/templates/https/nginx.default.tmpl
+++ b/data/templates/https/nginx.default.tmpl
@@ -39,6 +39,7 @@ server {
#
include snippets/snakeoil.conf;
{% endif %}
+ ssl_protocols TLSv1.2 TLSv1.3;
# proxy settings for HTTP API, if enabled; 503, if not
location ~ /(retrieve|configure|config-file|image|generate|show|docs|openapi.json|redoc|graphql) {