Resolved enable TSL 1.0 and 1.1

[Aniello Martuscelli]

Hello,
I've a little problem with Plesk
On all my domains only TLS 1.2 is available, how can re-enable 1.0 and 1.1?

doing
/usr/local/psa/bin/server_pref -s | grep ssl-protocols
output is

ssl-protocols:    TLSv1 TLSv1.1 TLSv1.2

seems enabled...

 

[UFHH01]

Hi Aniello Martuscelli,

pls. be more specific with your question and try not to leave out your current OWN checks and the depending configuration files. We are not able to guess, where you experience issues/errors/problems, if you don't provide such informations.

 

[Aniello Martuscelli]

Hello, and thanks for reply
i've done some tests through SSL Server Test (Powered by Qualys SSL Labs)
after test I see this report


image hosting

If u see only protocol active is TLS 1.2, but seems that on server other 1.0 and 1.1 are enabled

 

[UFHH01]

Hi Aniello Martuscelli,

such test - results may appear, if you use only "TLS1.2" ciphers suites. Pls. use for example the recommended "Intermediate" ciphers - suites from Mozilla.:

=> Mozilla SSL Configuration Generator => Generate Mozilla Security Recommended Web Server Configuration Files​

 

[Aniello Martuscelli]

ok fine
i've edited /etc/nginx/conf.d/ssl.conf
and i've edited lines with intermediate profile

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';
    ssl_prefer_server_ciphers on;

now output is

upload picture

many thanks