Resolved TLS versions for nginx

[Jürgen_T]

Server operating system version

Ubuntu 22.04.5 LTS

Plesk version and microupdate number

Plesk Obsidian v18.0.64_build1800240913.11 os_Ubuntu 22.04

My ssl.conf file in /etc/nginx/conf.de/ contains the following:

ssl_protocols TLSv1.2 TLSv1.3;
proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
...

Why do I have the old and weak TLS-versions TLSv1 TLSv1.1 automaticly installed for proxy_ssl_protocols. Does this make sense or can I remove it?

 

[Bitpalast]

The proxy_ssl_protocols are only relevant for the internal communication between Apache and Nginx. As this traffic is local only, there is practically no risk.

 

[Jürgen_T]

Thank you for the confirmation that it is used for internal com. Then I‘ll leave it unchanged.