Nginx Weak Cipher Suite Reject Fix

Threat/Impact Level: HIGH | Exploitability/Downtime Risk: HIGH | Time to Fix: 10 mins

TL;DR

• What broke: Nginx is advertising cipher suites (RC4, 3DES, EXPORT, or NULL ciphers) or deprecated protocols (TLSv1.0/1.1) that modern browsers and API clients hard-reject during the TLS handshake, returning ERR_SSL_VERSION_OR_CIPHER_MISMATCH or SSL alert: handshake failure (40).
• How to fix it: Replace ssl_ciphers and ssl_protocols with a Mozilla-hardened cipher string; reload Nginx. Full diff below.
• Use our Client-Side Sandbox above to paste your nginx.conf SSL block and auto-refactor it instantly — no data leaves your browser.

# Browser
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

# curl
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL

# openssl s_client
SSL handshake has read 7 bytes and written 0 bytes
Alert: handshake failure (40)

# Nginx error.log
2024/01/15 03:22:11 [crit] 1234#0: *99 SSL_do_handshake() failed 
  (SSL: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher) 
  while SSL handshaking, client: 203.0.113.45, server: 0.0.0.0:443

How to Fix It (The Solution)

Basic Fix

Locate your Nginx SSL server block (/etc/nginx/nginx.conf or /etc/nginx/conf.d/ssl.conf) and apply this diff:

 server {
     listen 443 ssl;
     ssl_certificate     /etc/nginx/ssl/cert.pem;
     ssl_certificate_key /etc/nginx/ssl/key.pem;
 
-    ssl_protocols       SSLv3 TLSv1 TLSv1.1 TLSv1.2;
+    ssl_protocols       TLSv1.2 TLSv1.3;
 
-    ssl_ciphers         ALL:!aNULL:!eNULL;
+    ssl_ciphers         ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
 
-    ssl_prefer_server_ciphers off;
+    ssl_prefer_server_ciphers on;
 }

Reload without downtime:

nginx -t && systemctl reload nginx

Verify immediately:

openssl s_client -connect yourdomain.com:443 -tls1_1 2>&1 | grep 'alert'
# Expected: SSL alert number 40 (handshake_failure) — TLS 1.1 is now rejected

openssl s_client -connect yourdomain.com:443 -tls1_2 2>&1 | grep 'Cipher is'
# Expected: Cipher is ECDHE-RSA-AES256-GCM-SHA384 (or similar AEAD)

Enterprise Best Practice

For production, layer in HSTS, OCSP stapling, DH param hardening, and session ticket rotation:

 server {
     listen 443 ssl http2;
 
     ssl_protocols             TLSv1.2 TLSv1.3;
     ssl_ciphers               ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305;
     ssl_prefer_server_ciphers on;
 
+    # Elliptic curve preference — P-256 for broad compat, X25519 for performance
+    ssl_ecdh_curve            X25519:prime256v1:secp384r1;
 
-    # Missing DH params = vulnerable to Logjam
+    ssl_dhparam               /etc/nginx/ssl/dhparam4096.pem;  # openssl dhparam -out dhparam4096.pem 4096
 
+    # OCSP Stapling — eliminates client-side CA round-trip
+    ssl_stapling              on;
+    ssl_stapling_verify       on;
+    resolver                  1.1.1.1 8.8.8.8 valid=300s;
+    resolver_timeout          5s;
 
+    # Session hardening
+    ssl_session_timeout       1d;
+    ssl_session_cache         shared:MozSSL:10m;
+    ssl_session_tickets       off;  # Disable — tickets bypass forward secrecy if key rotates slowly
 
+    # HSTS — 2-year max-age, preload-ready
+    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
 }

Generate the DH params (run once, takes ~2 min on modern hardware):

openssl dhparam -out /etc/nginx/ssl/dhparam4096.pem 4096

Validate your final config against Mozilla's SSL Observatory:

curl -s "https://ssl-checker.io/api/v1/check/yourdomain.com" | jq '.grade'
# Target: A or A+

💡 Tired of pasting proprietary infrastructure configs into public LLMs? Generic AI interfaces log your company's ARNs, connection strings, and private keys. StackEngine enforces client-side zero-trust boundaries—the sandbox above executes 100% locally in your browser. Drop your broken manifest above to redact secrets locally and synthesize deterministic patch drafts with your own API key.

(For CI/CD pipeline automation, install via npm i -g stackengine).

pip install checkov
checkov -d /etc/nginx --framework nginx
# Catches: CKV_NGINX_1 (TLS version), CKV_NGINX_2 (weak ciphers)

# .github/workflows/tls-audit.yml
- name: TLS Cipher Audit
  run: |
    docker run --rm drwetter/testssl.sh \
      --severity HIGH \
      --color 0 \
      --jsonfile tls-report.json \
      ${{ secrets.STAGING_HOST }}:443
    # Fail the pipeline if any HIGH/CRITICAL findings exist
    python3 -c "
    import json, sys
    r = json.load(open('tls-report.json'))
    highs = [f for f in r if f.get('severity') in ['HIGH','CRITICAL']]
    sys.exit(1) if highs else sys.exit(0)
    "

# policy/nginx_tls.rego
package nginx.tls

deny[msg] {
  input.ssl_protocols[_] == "TLSv1"
  msg := "TLSv1.0 is prohibited. Use TLSv1.2 or TLSv1.3 only."
}

deny[msg] {
  contains(input.ssl_ciphers, "RC4")
  msg := "RC4 cipher suites are prohibited."
}

deny[msg] {
  contains(input.ssl_ciphers, "3DES")
  msg := "3DES cipher suites are prohibited (SWEET32)."
}

conftest test nginx.conf --policy policy/

curl -s "https://ssl-config.mozilla.org/guidelines/5.7/nginx/intermediate" \
  -o /etc/nginx/snippets/mozilla-ssl.conf
# Include in your server blocks: include snippets/mozilla-ssl.conf;