[GH-ISSUE #128] Add TLS 1.3 Support #113

Closed
opened 2026-02-26 05:34:39 +03:00 by kerem · 5 comments
Owner

Originally created by @ne4u on GitHub (Apr 30, 2019).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/128

Using the latest version of alpine linux should add nginx and openssl versions that support TLS 1.3

Originally created by @ne4u on GitHub (Apr 30, 2019). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/128 Using the latest version of alpine linux should add nginx and openssl versions that support TLS 1.3
kerem closed this issue 2026-02-26 05:34:39 +03:00
Author
Owner

@jessebraham commented on GitHub (May 2, 2019):

Previously haven't had any issues, upon installing on a new machine tonight I get a 502 whenever I try to hit a proxy host. Looking in data/logs/error.log I found:

2019/05/02 02:22:47 [error] 391#391: *58 SSL_do_handshake() failed (SSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number) while SSL handshaking to upstream

So yeah, looks like no TLS 1.3 support and therefore new certificates from Letsencrypt will not work.

<!-- gh-comment-id:488536265 --> @jessebraham commented on GitHub (May 2, 2019): Previously haven't had any issues, upon installing on a new machine tonight I get a `502` whenever I try to hit a proxy host. Looking in `data/logs/error.log` I found: ``` 2019/05/02 02:22:47 [error] 391#391: *58 SSL_do_handshake() failed (SSL: error:1408F10B:SSL routines:ssl3_get_record:wrong version number) while SSL handshaking to upstream ``` So yeah, looks like no TLS 1.3 support and therefore new certificates from Letsencrypt will not work.
Author
Owner

@jc21 commented on GitHub (May 2, 2019):

Ok if someone wants to test the fix here, use this docker image and let me know how you go before I move forward:

jc21/nginx-proxy-manager:develop

note this is an amd64, won't work on any raspberry pi's

<!-- gh-comment-id:488544671 --> @jc21 commented on GitHub (May 2, 2019): Ok if someone wants to test the fix here, use this docker image and let me know how you go before I move forward: `jc21/nginx-proxy-manager:develop` note this is an `amd64`, won't work on any raspberry pi's
Author
Owner

@jessebraham commented on GitHub (May 2, 2019):

That was quick! So I think I had mis-configured something, and the error message was just a bit of a red-herring. I tested your develop image (which has some CSS oddities, by the way, seems fine otherwise though) and it worked. However, I then reverted to latest and everything seems happy still, so as I said I think I had made a mistake on my end 😄

<!-- gh-comment-id:488546660 --> @jessebraham commented on GitHub (May 2, 2019): That was quick! So I think I had mis-configured something, and the error message was just a bit of a red-herring. I tested your develop image (which has some CSS oddities, by the way, seems fine otherwise though) and it worked. However, I then reverted to latest and everything seems happy still, so as I said I think I had made a mistake on my end :smile:
Author
Owner

@OhHeyAlan commented on GitHub (May 7, 2019):

@jc21 I've been running jc21/nginx-proxy-manager:develop for about a week now with no problems and I modified the ssl-ciphers.conf to only allow TLSv1.2 & TLSv1.3

<!-- gh-comment-id:490106192 --> @OhHeyAlan commented on GitHub (May 7, 2019): @jc21 I've been running `jc21/nginx-proxy-manager:develop` for about a week now with no problems and I modified the ssl-ciphers.conf to only allow TLSv1.2 & TLSv1.3
Author
Owner

@jc21 commented on GitHub (May 7, 2019):

Awesome. I'll promote this to a new release

<!-- gh-comment-id:490294557 --> @jc21 commented on GitHub (May 7, 2019): Awesome. I'll promote this to a new release
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#113
No description provided.