Re: TLS 1.3 not being selected.

2018-06-07 Thread shiz
Ah! Thank you very much. Recompiled with older openssl 1.1.1 pre2 since current browsers implement draft 23 atm. It's working now. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,280017,280094#msg-280094 ___ nginx mailing list nginx@nginx.

Re: TLS 1.3 not being selected.

2018-06-03 Thread A. Schulze
Am 03.06.2018 um 13:59 schrieb shiz: > TLS 1.3offered (OK): draft 28, draft 27, draft 26 there are different, incompatible versions (drafts) of TLS1.3 Browser and server must implement the same draft version otherwise the browser fall back to TLS1.2. see https://wiki.openssl.org/index.ph

TLS 1.3 not being selected.

2018-06-03 Thread shiz
Hi, I can't see what I'm doing wrong. When I visit https://www.cloudflare.com/ with my browser TLS 1.3 is used. However when I visit my website, TLS 1.2 is selected instead. My browser (opera 53) has this in its command line: " --ssl-version-max=tls1.3 --tls13-variant=draft" Nginx is compiled