search

NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
20.81k stars 2.41k forks source link

TLSv1.3 and ssl_ciphers #2657

Open sanderlv opened 1 year ago

sanderlv commented 1 year ago

I encounter a very annoying issue. Exact issue description: https://github.com/custom-components/alexa_media_player/issues/1806

Checklist

Describe the bug When I run nginx manager I encounter an issue with the Alexa simple Simon says skill. it does not work due to the fact my NPM uses a too old TLS and chipher (according to alexa).

Nginx Proxy Manager Version 2.9.19

To Reproduce Steps to reproduce the behavior:

  1. Use a standard lets encrypt certificate.

Expected behavior It works with Alexa

Screenshots https://community.home-assistant.io/t/play-a-local-mp3-file-on-alexa-echo-dot/186187/104

Operating System Ubuntu with docker and original NPM docker

Additional context I would like to be able to add this:

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384";
ssl_ecdh_curve X25519:secp521r1:prime256v1:secp384r1;
sanderlv commented 10 months ago

BUMP - Is there any option to fix this? Or a workaround of manual fix possible? I yes, how to exactly?

sanderlv commented 9 months ago

BUMP2-3-4-5.... any progress at all? Or is this even been looked at?

Thanks in advance!

sanderlv commented 9 months ago

I could really use some guidance and help on how to get this:

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384";
ssl_ecdh_curve X25519:secp521r1:prime256v1:secp384r1;

in my config. Via this: https://nginxproxymanager.com/advanced-config/#custom-nginx-configurations

Or other, I am a novice user...

github-actions[bot] commented 2 months ago

Issue is now considered stale. If you want to keep it open, please comment :+1: