Verbosity: If a particular check cannot be performed because of a missing capability on your client side, you'll get a warning.Reliability: features are tested thoroughly.Toolbox: Several command line options help you to run your test and configure your output.Flexibility: You can test any SSL/TLS enabled and STARTTLS service, not only webservers at port 443.Alternatively a Dockerfile is provided or you can just use docker run -rm -ti drwetter/testssl.sh.OpenBSD only needs bash to be postinstalled. Ease of installation: Works for Linux, Mac OSX, FreeBSD, NetBSD and WSL/MSYS2/Cygwin out of the box: no need to install or configure something, no gems, CPAN, pip or the like.Clear output: you can tell easily whether anything is good or bad.Wonder if there is a way to specify nginx protocols the same way (and which would get me all of TLS 1.0 - 1.3).Openssl-1.0.2i-chacha.pm.ntributed/ Which before updating Debian resolved to 1.0 / 1.1 / 1.2 and now resolves to 1.0 - 1.3 inclusive. It has a different way (from nginx's) to specify TLS versions: I'm running the version from their repo, not from Debian's, and it's for Debian 'stable' not 'testing' and so probably was linked against OpenSSL 1.1 without TLS 1.3 support.

Is this an intentional change in nginx - upstream or as packaged by Debian? A change in openssl itself?Īny way I can enable all TLS versions from 1.0 and up to 1.3 in nginx at the same time? I tried removing either ssl_protocols or ssl_ciphers or both, nothing changed really. Ssl_ciphers kECDHE+CHACHA20:kECDHE+AESGCM:kDHE+AESGCM:kECDHE+AES+SHA:kDHE+AES+SHA:!AESCCM:!aNULL:!eNULL Ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3 Oh and by the way, Dovecot running on same system still has TLS 1.0 - 1.1 - 1.2 - 1.3 all functional: TLS 1.3 is enabled, and 1.2 is too, but I can't seem to get TLS 1.0 / 1.1 even though they're included in nginx configs. Seeing a strange issue with TLS versions in nginx. Have nginx 1.14 - used to come from 'stable backports' now included in Debian itself. Just updated Debian from 'stable' 9.* to 'testing' 10.*.

Debian squeeze test tls 1.2