nginx reverse proxy with TLSv1.1 and TLSv1.2

[MoritzK]

Hello,

I've enabled the Reverse Proxy Server (nginx) in Plesk.

Tools & Settings > Services Management > Reverse Proxy Server (nginx)

With enabled nginx I'm unable to contact web pages via TLSv1.1 and TLSv1.2. When nginx is disabled and the pages are handled by Apache everything is fine. But only when nginx is completely deactivated. It's not enough to disable "Smart static files processing" at the "Web Server Settings for sub.domain.tld".

I tried to add "ssl_protocols TLSv1.1 TLSv1.2;" at "Additional nginx directives" at the Web Server Settings, without effect.

I think i have to modify /etc/nginx/plesk.conf.d/server.conf but this file is generated by Plesk.

System:
OS: Ubuntu 12.04.4 LTS
Panel version: 11.5.30 Update #38
OpenSSL 1.0.1 14 Mar 2012

Results of SSL Server Test:

Summary


Configuration (Protocols and Cipher Suites)


Protocol Details and Miscellaneous


Source: https://www.ssllabs.com/ssltest/analyze.html

 

[MoritzK]

Solution

I found a solution to enable TLS 1.1 and TLS 1.2 by my self.

You have to modify the two PHP files:
usr/local/psa/admin/conf/templetes/default/nginxWebmailPartial.php
usr/local/psa/admin/conf/templetes/default/domain/nginxDomainVirtualHost.php

ssl_protocols             SSLv3 TLSv1 [B]TLSv1.1 TLSv1.2[/B];

webmail.* and all domains using nginx support TLS 1.1 and TLS 1.2 now.

 

[KamalG]

I found a solution to enable TLS 1.1 and TLS 1.2 by my self.

You have to modify the two PHP files:
usr/local/psa/admin/conf/templetes/default/nginxWebmailPartial.php
usr/local/psa/admin/conf/templetes/default/domain/nginxDomainVirtualHost.php

ssl_protocols             SSLv3 TLSv1 [B]TLSv1.1 TLSv1.2[/B];

webmail.* and all domains using nginx support TLS 1.1 and TLS 1.2 now.

I am using Plesk 12.0.18 and Centos 6

I am getting the protocol score as 70

and the following message

TLS 1.2 No
TLS 1.1 No

I did exactly as you have mentioned but it still doesn't enable the TLS 1.2 or 1.1

Kindly help