为了能快速了解并处理您的问题,请提供以下基础信息: 堡塔云WAF7.6Rockylinux10堡塔云WAF站点开启TLS1.0 1.1不生效 需要修改/www/cloud_waf/nginx/conf.d/vhost/0.default.conf 配置
server
{
listen 80;
listen 443 ssl;
server_name 127.0.0.251;
http2 on;
index index.html;
root /www/wwwroot/nginx/;
#SSL-START SSL
ssl_certificate /www/wwwroot/nginx/fullchain.pem;
ssl_certificate_key /www/wwwroot/nginx/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
add_header Strict-Transport-Security "max-age=31536000";
error_page 497 https://$host$request_uri;
#SSL-END
access_log /dev/null;
error_log /dev/null;
}
加入TLSv1 TLSv1.1 后重载nginx后生效 但从7.5更新到7.6后又恢复默认配置 没有tlsv1和1.1需要重新修改并载入
|
|