Enable TLSv1.3 in nginx (laravel forge)

Hello,

You have the correct ssl_protocols setting in your configuration file, but you also need to make sure that you are using an OpenSSL version that supports TLSv1.3.

You mentioned that you are using OpenSSL 1.1.1d, which does support TLSv1.3. However, you also need to make sure that your Nginx is compiled with this version of OpenSSL.

1. Check the Nginx version and compilation options by running:

nginx -V

2. Look for the --with-openssl flag in the output. If it’s not there or pointing to an older version of OpenSSL, you will need to recompile Nginx with the correct OpenSSL version.
3. If you need to recompile Nginx, first install the required dependencies:

sudo apt-get update
sudo apt-get install build-essential libpcre3 libpcre3-dev zlib1g zlib1g-dev libssl-dev

4. Download the latest version of Nginx and OpenSSL:

wget https://nginx.org/download/nginx-1.17.3.tar.gz
wget https://www.openssl.org/source/openssl-1.1.1d.tar.gz

5. Extract both packages:

tar -xzf nginx-1.17.3.tar.gz
tar -xzf openssl-1.1.1d.tar.gz

6. Navigate to the Nginx directory and compile Nginx with the correct OpenSSL version:

cd nginx-1.17.3 ./configure --with-openssl=../openssl-1.1.1d --with-http_ssl_module make sudo make install

7. Update your Nginx configuration files, as you mentioned in your question, to include TLSv1.3:

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

8. Test the Nginx configuration and restart the Nginx service:

sudo nginx -t
sudo systemctl restart nginx

9. Test TSL version

curl -I -v --tlsv1.3 --tls-max 1.3 https://yourwebsite.com