Nginx SSL Protocol Compatibility Auditor

Threat/Impact Level: CRITICAL | Exploitability/Downtime Risk: HIGH | Time to Fix: 10 mins

TL;DR

• What broke: Nginx is advertising a TLS protocol version or cipher suite the client browser has permanently disabled — handshake fails before a single byte of application data is exchanged. Site is completely unreachable for affected clients.
• How to fix it: Force ssl_protocols TLSv1.2 TLSv1.3; and replace the cipher string with the Mozilla Intermediate or Modern profile. Reload Nginx. Verify with openssl s_client.
• Fast path: Use our Client-Side Sandbox above to auto-refactor this — paste your server {} block and get a hardened replacement without sending your cert paths or domain names to any external server.

This site can't provide a secure connection
example.com uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

# Nginx access log: nothing — handshake never completed
# Nginx error log:
2024/01/15 03:42:17 [info] 12345#0: *1 SSL_do_handshake() failed
  (SSL: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher)
  while SSL handshaking, client: 203.0.113.45, server: 0.0.0.0:443

How to Fix It (The Solution)

Diagnose First — Don't Guess

# Check what protocols your server is actually advertising
openssl s_client -connect example.com:443 -tls1_1 2>&1 | grep -E 'Protocol|Cipher|error'

# Check the full chain
openssl s_client -connect example.com:443 -showcerts 2>&1 | grep -E 'subject|issuer|Verify'

# Fast TLS audit (install testssl.sh)
bash testssl.sh --protocols --cipher-per-proto example.com

Basic Fix

Locate your Nginx SSL server {} block — typically /etc/nginx/sites-enabled/your-site.conf or /etc/nginx/nginx.conf.

server {
    listen 443 ssl;
    server_name example.com;

    ssl_certificate     /etc/ssl/certs/example.com.crt;
    ssl_certificate_key /etc/ssl/private/example.com.key;

-   ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
+   ssl_protocols TLSv1.2 TLSv1.3;

-   ssl_ciphers ALL:!aNULL:!eNULL;
+   ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+   ssl_prefer_server_ciphers off;
}

# Validate config before reload — never skip this
nginx -t && systemctl reload nginx

Enterprise Best Practice (Hardened Production Config)

This is the full Mozilla Intermediate compatibility profile (supports clients back to Firefox 27, Android 4.4.2, IE 11). If you can drop legacy clients entirely, swap to the Modern profile (TLSv1.3 only).

http {
+   # Global SSL session cache — reduces handshake overhead at scale
+   ssl_session_cache   shared:SSL:10m;
+   ssl_session_timeout 1d;
+   ssl_session_tickets off;  # Disable — session ticket key rotation is operationally complex

    server {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name example.com;

        ssl_certificate     /etc/ssl/certs/example.com_fullchain.pem;
        ssl_certificate_key /etc/ssl/private/example.com.key;

+       # DH params — generate once: openssl dhparam -out /etc/nginx/dhparam.pem 4096
+       ssl_dhparam /etc/nginx/dhparam.pem;

-       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+       ssl_protocols TLSv1.2 TLSv1.3;

-       ssl_ciphers HIGH:!aNULL:!MD5;
+       ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+       ssl_prefer_server_ciphers off;

+       # OCSP Stapling — eliminates client-side CA round-trip
+       ssl_stapling on;
+       ssl_stapling_verify on;
+       ssl_trusted_certificate /etc/ssl/certs/ca-chain.pem;
+       resolver 1.1.1.1 8.8.8.8 valid=300s;
+       resolver_timeout 5s;

+       # HSTS — 2-year max-age, include subdomains only after full audit
+       add_header Strict-Transport-Security "max-age=63072000" always;
+       add_header X-Frame-Options DENY;
+       add_header X-Content-Type-Options nosniff;
    }
}

Verify the fix:

# Must return TLSv1.3 or TLSv1.2, never lower
openssl s_client -connect example.com:443 </dev/null 2>&1 | grep 'Protocol '

# Confirm old protocols are rejected
openssl s_client -connect example.com:443 -tls1_1 </dev/null 2>&1 | grep -c 'handshake failure'
# Expected output: 1

# SSL Labs score check (external)
curl -s "https://api.ssllabs.com/api/v3/analyze?host=example.com&publish=off&all=done" | jq '.endpoints[0].grade'
# Target: A or A+

💡 Tired of pasting proprietary infrastructure configs into public LLMs? Generic AI interfaces log your company's ARNs, connection strings, and private keys. StackEngine enforces client-side zero-trust boundaries—the sandbox above executes 100% locally in your browser. Drop your broken manifest above to redact secrets locally and synthesize deterministic patch drafts with your own API key.

(For CI/CD pipeline automation, install via npm i -g stackengine).

# .github/workflows/ssl-audit.yml
- name: TLS Protocol Audit
  run: |
    docker run --rm drwetter/testssl.sh \
      --protocols \
      --cipher-per-proto \
      --severity HIGH \
      --jsonfile /tmp/tls-report.json \
      ${{ secrets.STAGING_DOMAIN }}
    # Fail pipeline if TLSv1.1 or lower is enabled
    python3 -c "
    import json, sys
    r = json.load(open('/tmp/tls-report.json'))
    bad = [f for f in r if f.get('id') in ['tls1','ssl3','ssl2'] and f.get('finding') != 'not offered']
    sys.exit(1) if bad else sys.exit(0)
    "

# If managing Nginx via Terraform (e.g., AWS ALB listener policies)
checkov -d ./terraform --check CKV_AWS_103  # Enforce TLS 1.2 on ALB
checkov -d ./terraform --check CKV_AWS_86   # ALB access logging

# policy/nginx_tls.rego
package nginx.tls

deny[msg] {
    proto := input.ssl_protocols[_]
    forbidden := {"SSLv2", "SSLv3", "TLSv1", "TLSv1.1"}
    forbidden[proto]
    msg := sprintf("Forbidden TLS protocol in Nginx config: %v", [proto])
}

deny[msg] {
    not input.ssl_protocols
    msg := "ssl_protocols directive is missing from server block"
}

# Run in CI against rendered Nginx configs
conftest test /etc/nginx/sites-enabled/ --policy policy/nginx_tls.rego

# Alert if TLS handshake failures spike — indicates client compatibility regression
- alert: NginxTLSHandshakeFailureSpike
  expr: rate(nginx_connections_active{state="ssl_handshake_error"}[5m]) > 0.05
  for: 2m
  labels:
    severity: critical
  annotations:
    summary: "Nginx TLS handshake failure rate exceeding 5% — check ssl_protocols config"