请问一下哪个版本的 nginx 自带 tls 1.3?

• 資深大佬 : gstqc

  https://nginx.org/en/linux_packages.html
  这里的二进制 使用系统自带的 openssl 版本

• 主 資深大佬 : nbweb

  @gstqc 我现在就是用的这里的二进制安装的，debian 10.3+nginx 1.19 ，tls 还是 1.2 的

• 資深大佬 : learningman

  nginx 源码不带 ssl 的吧

• 主 資深大佬 : nbweb

  # nginx -V
  nginx version: nginx/1.19.1
  built by gcc 8.3.0 (Debian 8.3.0-6)
  built with OpenSSL 1.1.1d 10 Sep 2019
  TLS SNI support enabled
  configure arguments: –prefix=/etc/nginx –sbin-path=/usr/sbin/nginx –modules-path=/usr/lib/nginx/modules –conf-path=/etc/nginx/nginx.conf –error-log-path=/var/log/nginx/error.log –http-log-path=/var/log/nginx/access.log –pid-path=/var/run/nginx.pid –lock-path=/var/run/nginx.lock –http-client-body-temp-path=/var/cache/nginx/client_temp –http-proxy-temp-path=/var/cache/nginx/proxy_temp –http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp –http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp –http-scgi-temp-path=/var/cache/nginx/scgi_temp –user=nginx –group=nginx –with-compat –with-file-aio –with-threads –with-http_addition_module –with-http_auth_request_module –with-http_dav_module –with-http_flv_module –with-http_gunzip_module –with-http_gzip_static_module –with-http_mp4_module –with-http_random_index_module –with-http_realip_module –with-http_secure_link_module –with-http_slice_module –with-http_ssl_module –with-http_stub_status_module –with-http_sub_module –with-http_v2_module –with-mail –with-mail_ssl_module –with-stream –with-stream_realip_module –with-stream_ssl_module –with-stream_ssl_preread_module –with-cc-opt=’-g -O2 -fdebug-prefix-map=/data/builder/debuild/nginx-1.19.1/debian/debuild-base/nginx-1.19.1=. -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC’ –with-ld-opt=’-Wl,-z,relro -Wl,-z,now -Wl,–as-needed -pie’
• 主 資深大佬 : nbweb

  Package: openssl
  Version: 1.1.1d-0+deb10u3
  系统自带的 openssl 是 1.1.1d 的，按理说 c 以后就是 tls 1.3 了，为何网站显示为 1.2 ？

• 資深大佬 : NerverLibis

  nginx 配置文件可以设置开启哪些协议，另外只对 https 生效

• 資深大佬 : NerverLibis

  tls1.0 1.1 1.2 1.3 需要手动设置
  nmap 可以内网检测

• 資深大佬 : deorth

  debian 10 源里的 1.14.2 就能用 tls1.3，只是默认配置没有开启而已

• 資深大佬 : Showfom

  nginx.io