Prevent unsupported TLS 1.3 on xenial by default

nginx don't support it on the default package.
This commit is contained in:
Luis Guzmán 2020-08-11 02:23:40 -05:00
parent 3ce3587527
commit 26fa649980
1 changed files with 2 additions and 2 deletions

View File

@ -141,7 +141,7 @@ fi
#Suggest 18.04 LTS release over 16.04 #Suggest 18.04 LTS release over 16.04
if [ "$DIST" = "xenial" ]; then if [ "$DIST" = "xenial" ]; then
echo " > $(lsb_release -sc), even when it's compatible and functional. echo " > $(lsb_release -sc), even when it's compatible and functional.
We suggest to use the next (LTS) release, for longer support and security reasons." We suggest to use the next (LTS) release, for longer support and security reasons."
read -n 1 -s -r -p "Press any key to continue..."$'\n' read -n 1 -s -r -p "Press any key to continue..."$'\n'
fi fi
#Check resources #Check resources
@ -810,7 +810,7 @@ if [ "$DROP_TLS1" = "yes" ] && [ "$DIST" != "xenial" ];then
elif [ "$DROP_TLS1" = "yes" ] && [ "$DIST" = "xenial" ];then elif [ "$DROP_TLS1" = "yes" ] && [ "$DIST" = "xenial" ];then
echo "Only dropping TLSv1/1.1" echo "Only dropping TLSv1/1.1"
sed -i "s|TLSv1 TLSv1.1||" /etc/nginx/nginx.conf sed -i "s|TLSv1 TLSv1.1||" /etc/nginx/nginx.conf
#sed -i "s|TLSv1 TLSv1.1||" $WS_CONF sed -i "s| TLSv1.3||" $WS_CONF
else else
echo "No TLSv1/1.1 dropping was done. Please report to echo "No TLSv1/1.1 dropping was done. Please report to
https://github.com/switnet-ltd/quick-jibri-installer/issues " https://github.com/switnet-ltd/quick-jibri-installer/issues "