From 997e02a04e58162b6950d3896fbc7b69b0ec04f9 Mon Sep 17 00:00:00 2001 From: Dustin Dauncey Date: Wed, 29 Nov 2023 09:41:08 -0800 Subject: [PATCH] Fix: ssl_protocols does not rely on ssl_cipher_suite property There was a support case recently where they wanted to disable TLSv1.1. However because the ssl_protocols property had a statement about being ignored unless the ssl_cipher_suite was set to custom, this led to additional issues / time wasted troubleshooting. The ssl_protocols property does _not_ require the ssl_cipher_suite to be custom. --- kong.conf.default | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/kong.conf.default b/kong.conf.default index 14c2a3a0946..8c48257bd49 100644 --- a/kong.conf.default +++ b/kong.conf.default @@ -765,8 +765,7 @@ # client-side connections. The set of # supported protocol versions also depends # on the version of OpenSSL Kong was built - # with. This value is ignored if - # `ssl_cipher_suite` is not `custom`. + # with. # # See http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_protocols