Enable TLS 1.3 in our nginx config #92

New Issue

greg · 2019-08-30T09:44:04Z

greg commented

2019-08-30 09:44:04 +00:00

The current mainline versions of the official nginx packages are compiled against OpenSSL 1.1.1, and support TLS 1.3.

The version installed on barnard is already 1.7 (1.7.1, two minor versions behind), but the package installed on andromeda is still 1.15.9, compiled against OpenSSL 1.0.2g.

I will set the latest version on the package resource so we can easily upgrade it, as well as enable TLS 1.3

The current mainline versions of the official nginx packages are compiled against OpenSSL 1.1.1, and support TLS 1.3. The version installed on barnard is already 1.7 (1.7.1, two minor versions behind), but the package installed on andromeda is still 1.15.9, compiled against OpenSSL 1.0.2g. I will set the latest version on the package resource so we can easily upgrade it, as well as enable TLS 1.3

greg self-assigned this 2019-08-30 09:44:04 +00:00

greg referenced this issue from a commit

2019-08-30 09:59:08 +00:00

Update nginx to 1.17.3, enable TLS 1.3 Uses the current intermediate recommended config from https://ssl-config.mozilla.org Closes #92

raucao closed this issue

2019-08-30 10:39:14 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#92