{"id":165779,"date":"2020-10-10T16:07:03","date_gmt":"2020-10-10T08:07:03","guid":{"rendered":"http:\/\/4563.org\/?p=165779"},"modified":"2020-10-10T16:07:03","modified_gmt":"2020-10-10T08:07:03","slug":"%e8%af%b7%e9%97%ae%e4%b8%80%e4%b8%8b%e5%93%aa%e4%b8%aa%e7%89%88%e6%9c%ac%e7%9a%84-nginx-%e8%87%aa%e5%b8%a6-tls-1-3","status":"publish","type":"post","link":"http:\/\/4563.org\/?p=165779","title":{"rendered":"\u8bf7\u95ee\u4e00\u4e0b\u54ea\u4e2a\u7248\u672c\u7684 nginx \u81ea\u5e26 tls 1.3?"},"content":{"rendered":"
\n
\n
\n

\u8bf7\u95ee\u4e00\u4e0b\u54ea\u4e2a\u7248\u672c\u7684 nginx \u81ea\u5e26 tls 1.3? <\/h1>\n

<\/p>\n

\n
\u8cc7\u6df1\u5927\u4f6c : nbweb <\/span> <\/i> 1<\/span> <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
<\/p>\n

\u5982\u679c\u4e0d\u81ea\u5e26\uff0c\u8001\u662f\u8981\u81ea\u5df1\u7f16\u8bd1\u8fdb\u53bb\u3002<\/p>\n

\u53e6\u5916\uff0c\u5982\u679c\u7528 shell \u811a\u672c\u81ea\u52a8\u7f16\u8bd1\uff0c\u5982\u4f55\u83b7\u53d6 nginx \u7f51\u7ad9\u4e0a\u7684\u6700\u65b0\u7248\u672c\uff1f\u5426\u5219 nginx \u6bcf\u6b21\u66f4\u65b0\uff0c\u90fd\u8981\u5230 shell \u91cc\u624b\u52a8\u6539\u4e00\u4e0b\u7248\u672c\u53f7\u3002<\/p>\n<\/p><\/div>\n

\u5927\u4f6c\u6709\u8a71\u8aaa<\/b> (9<\/span>) <\/div>\n
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n
    \n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : gstqc <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    https:\/\/nginx.org\/en\/linux_packages.html
    \u8fd9\u91cc\u7684\u4e8c\u8fdb\u5236 \u4f7f\u7528\u7cfb\u7edf\u81ea\u5e26\u7684 openssl \u7248\u672c <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nbweb <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    @gstqc \u6211\u73b0\u5728\u5c31\u662f\u7528\u7684\u8fd9\u91cc\u7684\u4e8c\u8fdb\u5236\u5b89\u88c5\u7684\uff0cdebian 10.3+nginx 1.19 \uff0ctls \u8fd8\u662f 1.2 \u7684 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : learningman <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    nginx \u6e90\u7801\u4e0d\u5e26 ssl \u7684\u5427 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nbweb <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    # nginx -V
    nginx version: nginx\/1.19.1
    built by gcc 8.3.0 (Debian 8.3.0-6)
    built with OpenSSL 1.1.1d 10 Sep 2019
    TLS SNI support enabled
    configure arguments: –prefix=\/etc\/nginx –sbin-path=\/usr\/sbin\/nginx –modules-path=\/usr\/lib\/nginx\/modules –conf-path=\/etc\/nginx\/nginx.conf –error-log-path=\/var\/log\/nginx\/error.log –http-log-path=\/var\/log\/nginx\/access.log –pid-path=\/var\/run\/nginx.pid –lock-path=\/var\/run\/nginx.lock –http-client-body-temp-path=\/var\/cache\/nginx\/client_temp –http-proxy-temp-path=\/var\/cache\/nginx\/proxy_temp –http-fastcgi-temp-path=\/var\/cache\/nginx\/fastcgi_temp –http-uwsgi-temp-path=\/var\/cache\/nginx\/uwsgi_temp –http-scgi-temp-path=\/var\/cache\/nginx\/scgi_temp –user=nginx –group=nginx –with-compat –with-file-aio –with-threads –with-http_addition_module –with-http_auth_request_module –with-http_dav_module –with-http_flv_module –with-http_gunzip_module –with-http_gzip_static_module –with-http_mp4_module –with-http_random_index_module –with-http_realip_module –with-http_secure_link_module –with-http_slice_module –with-http_ssl_module –with-http_stub_status_module –with-http_sub_module –with-http_v2_module –with-mail –with-mail_ssl_module –with-stream –with-stream_realip_module –with-stream_ssl_module –with-stream_ssl_preread_module –with-cc-opt=’-g -O2 -fdebug-prefix-map=\/data\/builder\/debuild\/nginx-1.19.1\/debian\/debuild-base\/nginx-1.19.1=. -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC’ –with-ld-opt=’-Wl,-z,relro -Wl,-z,now -Wl,–as-needed -pie’ <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u4e3b<\/span> \u8cc7\u6df1\u5927\u4f6c : nbweb <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    Package: openssl
    Version: 1.1.1d-0+deb10u3
    \u7cfb\u7edf\u81ea\u5e26\u7684 openssl \u662f 1.1.1d \u7684\uff0c\u6309\u7406\u8bf4 c \u4ee5\u540e\u5c31\u662f tls 1.3 \u4e86\uff0c\u4e3a\u4f55\u7f51\u7ad9\u663e\u793a\u4e3a 1.2 \uff1f <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : NerverLibis <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    nginx \u914d\u7f6e\u6587\u4ef6\u53ef\u4ee5\u8bbe\u7f6e\u5f00\u542f\u54ea\u4e9b\u534f\u8bae\uff0c\u53e6\u5916\u53ea\u5bf9 https \u751f\u6548 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : NerverLibis <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    tls1.0 1.1 1.2 1.3 \u9700\u8981\u624b\u52a8\u8bbe\u7f6e
    nmap \u53ef\u4ee5\u5185\u7f51\u68c0\u6d4b <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : deorth <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    debian 10 \u6e90\u91cc\u7684 1.14.2 \u5c31\u80fd\u7528 tls1.3\uff0c\u53ea\u662f\u9ed8\u8ba4\u914d\u7f6e\u6ca1\u6709\u5f00\u542f\u800c\u5df2 <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n
    \n
    \n
    \u8cc7\u6df1\u5927\u4f6c : Showfom <\/span> <\/div>\n
    <\/i> <\/span> <\/div>\n<\/p><\/div>\n
    nginx.io <\/div>\n<\/p><\/div>\n<\/li>\n
  • \n","protected":false},"excerpt":{"rendered":"

    \u8bf7\u95ee\u4e00\u4e0b\u54ea\u4e2a\u7248\u672c\u7684 nginx \u81ea…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[],"tags":[],"_links":{"self":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/165779"}],"collection":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=165779"}],"version-history":[{"count":0,"href":"http:\/\/4563.org\/index.php?rest_route=\/wp\/v2\/posts\/165779\/revisions"}],"wp:attachment":[{"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=165779"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=165779"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/4563.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=165779"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}