Tune tls unsecure dropping
This commit is contained in:
parent
5a2d0f7872
commit
0f399fab18
|
@ -790,11 +790,11 @@ if [ "$ENABLE_SA" = "yes" ] && [ -f $WS_CONF ]; then
|
||||||
sed -i "/RANDOM_AVATAR_URL_SUFFIX/ s|false|\'.png\'|" $INT_CONF
|
sed -i "/RANDOM_AVATAR_URL_SUFFIX/ s|false|\'.png\'|" $INT_CONF
|
||||||
fi
|
fi
|
||||||
#nginx -tlsv1/1.1
|
#nginx -tlsv1/1.1
|
||||||
if [ "$DROP_TLS1" = "yes" ] && [ "$DIST" = "bionic" ];then
|
if [ "$DROP_TLS1" = "yes" ] && [ ! "$DIST" = "xenial" ];then
|
||||||
echo "Dropping TLSv1/1.1 in favor of v1.3"
|
echo "Dropping TLSv1/1.1 in favor of v1.3"
|
||||||
sed -i "s|TLSv1 TLSv1.1|TLSv1.3|" /etc/nginx/nginx.conf
|
sed -i "s|TLSv1 TLSv1.1|TLSv1.3|" /etc/nginx/nginx.conf
|
||||||
#sed -i "s|TLSv1 TLSv1.1|TLSv1.3|" $WS_CONF
|
#sed -i "s|TLSv1 TLSv1.1|TLSv1.3|" $WS_CONF
|
||||||
elif [ "$DROP_TLS1" = "yes" ] && [ ! "$DIST" = "bionic" ];then
|
elif [ "$DROP_TLS1" = "yes" ] && [ "$DIST" = "xenial" ];then
|
||||||
echo "Only dropping TLSv1/1.1"
|
echo "Only dropping TLSv1/1.1"
|
||||||
sed -i "s|TLSv1 TLSv1.1||" /etc/nginx/nginx.conf
|
sed -i "s|TLSv1 TLSv1.1||" /etc/nginx/nginx.conf
|
||||||
#sed -i "s|TLSv1 TLSv1.1||" $WS_CONF
|
#sed -i "s|TLSv1 TLSv1.1||" $WS_CONF
|
||||||
|
|
Loading…
Reference in New Issue