How to "unsupport" TLS 1.0 and TLS 1.1.

[wawefr]

Hello guy's
When I made a test with SSL Lab I have a subject about TLS 1.0 and 1.1.

I change the ssl-ciphers.conf with this config but always the problem

If you can help me to stop TLS1.0 and TLS1.1
Thanks Fred

[rafabravo]

Hi,
I have added in "advanced":

ssl_protocols TLSv1.2 TLSv1.3;

and...

Protocols
TLS 1.3 No
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No
SSL 3 No
SSL 2 No

But it doesn't enabled tls1.3...

[wawefr]

Hi thanks. Where dose I write "advanced" ? wich file ? Thanks

[rafabravo]

Yes, in advanced:

[rafabravo]

My config:

ssl_protocols TLSv1.2 TLSv1.3;
ssl_dhparam /data/nginx/dhparam.pem; <== create
ssl_ciphers TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES256-GCM-SHA384:!TLS_AES_128_GCM_SHA256;
ssl_prefer_server_ciphers off;
ssl_ecdh_curve secp521r1:secp384r1:prime256v1;
ssl_session_timeout 10m;
ssl_session_cache shared:SSL:10m;
resolver_timeout 5s;
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";

[rafabravo]

#2823

[wawefr]

Hi
Many thanks for your answer I will do a test
At this moment I finded an other solution via Cloudflare tunnel where I can block TLS TLS 1.1 and TLS 1.0