Starting TLS 1.3 w Nginx
The following tutorial describes how to instantly start tls 1.3 on a server with Nginx.
The case is really simple get started!
For starters requirements:
Nginx 1.13.0
Openssl version 1.1.1
The whole is a limited edition of our vhost and editing lines :
1 | ssl_protocols |
We change it to:
1 | ssl_protocols TLSv1.2 TLSv1.3; |
Vhost should look like:
1 2 3 4 5 6 7 8 9 10 11 12 13 14 | server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name example.com; root /var/www/example.com/public; ssl_certificate /path/to/your/certificate.crt; ssl_certificate_key /path/to/your/private.key; ssl_protocols TLSv1.2 TLSv1.3; } |
After making changes to reload Nginx
1 | sudo systemctl reload nginx.service |