php 支持 tls1.2,测试网站nginx是否支持tls1.2的命令行

[root@~]# nmap --script ssl-enum-ciphers -p 443 www.想休息.cn

Starting Nmap 5.51 ( http://nmap.org ) at 2018-03-13 20:11 CST

Nmap scan report for www.想休息.cn (42.120.49.23)

Host is up (0.00061s latency).

PORT STATE SERVICE

443/tcp open https

| ssl-enum-ciphers:

| TLSv1.0

| Ciphers (7)

| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

| TLS_RSA_WITH_AES_128_CBC_SHA

| TLS_RSA_WITH_AES_256_CBC_SHA

| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

| Compressors (1)

| uncompressed

| TLSv1.1

| Ciphers (7)

| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

| TLS_RSA_WITH_AES_128_CBC_SHA

| TLS_RSA_WITH_AES_256_CBC_SHA

| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

| Compressors (1)

| uncompressed

| TLSv1.2

| Ciphers (15)

| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

| TLS_RSA_WITH_AES_128_CBC_SHA

| TLS_RSA_WITH_AES_128_CBC_SHA256

| TLS_RSA_WITH_AES_128_GCM_SHA256

| TLS_RSA_WITH_AES_256_CBC_SHA

| TLS_RSA_WITH_AES_256_CBC_SHA256

| TLS_RSA_WITH_AES_256_GCM_SHA384

| TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

| TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

| Compressors (1)

|_ uncompressed

Nmap done: 1 IP address (1 host up) scanned in 1.34 seconds

[root@~]#

===

nginx要升级

openssl要升级。

跟php倒是没有关系，只是curl的openssl库比系统的低，不知道会不会影响