从
nginx documentation for ssl_protocols指令:
The TLSv1.1 and TLSv1.2 parameters are supported starting from versions 1.1.13 and 1.0.12, so when the OpenSSL version 1.0.1 or higher is used on older nginx versions, these protocols work, but cannot be disabled.`
在较新的版本中,可以使用openssl命令验证,如下所示:
>验证是否支持TLS v1.2:openssl s_client -tls1_2 -connect example.org:443验证不支持TLS v1.1:openssl s_client -tls1_1 -connect example.org:443验证不支持TLS v1.0:openssl s_client -tls1 -connect example.org:443