How to enable TLS 1.3 in nginx configuration? [SOLVED]

Is that the actual FQDN?
(without the actual name, we can't help much)

As for your topic question:
This:

# configuration file /etc/nginx/snippets/ssl-params.conf:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";

Seems to conflict with this:

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305';

Despite "common logic", you can't set these types of settings in ways that contradict.
Like:
VHOST 1 = TLSv1.2 ONLY
VHOST 2 = TLSv1.3 ONLY
VHOST 3 = TLSv1.2 & 1.3

[&2* readers: Get involved; Be heard. It starts with: if you read something you like, then like it :heart:]

1 Like