nginx配置TLS1.2,1.3

判断网站是否支持TLS1.几

openssl s_client -connect 192.168.0.163:8011 -tls1_2
openssl s_client -connect 192.168.0.163:8011 -tls1_1
openssl s_client -connect 192.168.0.163:8011 -tls1

正常返回

连接失败返回

nginx配置

#启用1.2 ，1.3
ssl_protocols TLSv1.2 TLSv1.3;
#禁用1.0 1.1
ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
ssl_prefer_server_ciphers  on;

示例