Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLSv1.3 support #123

Open
cyd01 opened this issue Jan 3, 2022 · 2 comments
Open

TLSv1.3 support #123

cyd01 opened this issue Jan 3, 2022 · 2 comments

Comments

@cyd01
Copy link

cyd01 commented Jan 3, 2022

I use a private docker repository that use TLS v1.3 protocol only (for security purpose). Prior versions were disabled.
It seems version v1.3 is not enabled in nginx:

2022/01/03 08:01:53 [error] 79#79: *37 SSL_do_handshake() failed (SSL: error:1409442E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:SSL alert number 70) while SSL handshaking to upstream, client: 127.0.0.1, server: proxy_caching_, request: "GET /v2/mocks/apisprout/manifests/latest HTTP/1.1", upstream: "https://192.168.0.16:443/v2/mocks/apisprout/manifests/latest", host: "my.repos.io"
{"access_time":"03/Jan/2022:08:01:53 +0000","upstream_cache_status":"MISS","method":"GET","uri":"/v2/mocks/apisprout/manifests/latest","request_type":"manifest-default","status":"502","bytes_sent":"157","upstream_response_time":"0.044","host":"my.repos.io","proxy_host":"my.repos.io","upstream":"192.168.0.16:443"}

How can I enable it ?

@rpardini
Copy link
Owner

rpardini commented Jan 5, 2022

Good question. You'd need to search on nginx on which this project is based. This project's base image builds nginx from source, so whatever's required for support should be achievable, and PRs are welcome! I commend you on TLSv1.3-only posture.

@cyd01
Copy link
Author

cyd01 commented Jan 6, 2022

Thanks for answering.
Here is the pull request: #124

@cyd01 cyd01 mentioned this issue Jan 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants