Subject: Re: [bug#46049] [PATCH] services: nginx: Add ssl-protocols option.

From: Tobias Geerinckx-Rice <[email-masked]>
Date: Sun, 24 Jan 2021 01:45:54 +0100

Jonathan,

Jonathan Brielmaier 写道：
> * gnu/services/web.scm 
> (<nginx-server-configuration>)[ssl-protocols]:
> New entry defaulting to "secure" versions of TLS.

Thanks!

> +  (ssl-protocols       nginx-server-configuration-ssl-protocols
> +                       (default "TLSv1.2 TLSv1.3"))

This should be

  (default "TLSv1 TLSv1.1 TLSv1.2")

instead, see [0].  Otherwise LGTM!

Kind regards,

T G-R

[0]: 
https://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols