# Enabling TLS 1.1/1.2 with Ubuntu Oneiric Packages?

**URL:** <https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395>\
**Category:** NGINX\
**Created:** [May 1, 2012, 9:25pm UTC](https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395 "2012-05-01T21:25:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\
**Post date:** [May 1, 2012, 9:25pm UTC](https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395/1 "2012-05-01T21:25:52Z")

</div>

Hello,

I have the correct variables enabled in my sites-available/default and  
ssllabs reports that TLS v1 is available, but TLS v1.1 and TLS v1.2 are  
not:

ssl\_protocols TLSv1.1 TLSv1.2 TLSv1 SSLv3;  
ssl\_ciphers RC4:HIGH:!aNULL:!MD5;  
ssl\_prefer\_server\_ciphers on;

I am using the pre-built nginx 1.2 packages from ‘deb  
[Index of /packages/ubuntu/](http://nginx.org/packages/ubuntu/) oneiric nginx’ and I would like to  
enable TLS 1.1/1.2. I’m running OpenSSL 1.0.0e and I understand I need  
to run at least 1.0.1 for TLS 1.1/1.2 to be supported.

Is this a matter of just upgrading OpenSSL at the Ubuntu (Linux) level,  
or will I need to build Nginx from source with the OpenSSL 1.0.1 libs?

As a secondary question, have any dates been thrown around as to when  
packages will be released that enable TLS v1.1/v1.2?

Thanks as always,

Matt

Posted at Nginx Forum:

> **[Enabling TLS 1.1/1.2 with Ubuntu Oneiric Packages?](https://forum.nginx.org/read.php?2,225949,225949#msg-225949)**
>
> Hello, I have the correct variables enabled in my sites-available/default and ssllabs reports that TLS v1 is available, but TLS v1.1 and TLS v1.2 are not: ssl\_protocols TLSv1.1 TLSv1.2 TLSv1 SSLv3; ssl\_ciphers RC4:HIGH:!aNULL:!MD5; ss

---

<div class="post-metadata">

**Author:** ![mevans336](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/3da27b/32.png) [@mevans336](https://www.ruby-forum.com/u/mevans336)\
**Post date:** [May 1, 2012, 9:52pm UTC](https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395/2 "2012-05-01T21:52:36Z")

</div>

Hi,

You can build nginx with SSL support by using OpenSSL, shared or  
compiled-in. The wiki covers all the ./configure options you can use,  
as well as default and third-party modules. If it’s not compiled in  
(by you or a package maintainer), i don’t think you can enable it at  
run-time.

Everything else is distro-specific, ask in an Ubuntu mailing list.

Bye.

–  
“On the internet, nobody knows you’re a dog.”

---

<div class="post-metadata">

**Author:** ![mevans336](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/3da27b/32.png) [@mevans336](https://www.ruby-forum.com/u/mevans336)\
**Post date:** [May 2, 2012, 2:26pm UTC](https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395/3 "2012-05-02T14:26:50Z")

</div>

On 01.05.2012, at 23:25, mevans336 wrote:

> Is this a matter of just upgrading OpenSSL at the Ubuntu (Linux) level,  
> or will I need to build Nginx from source with the OpenSSL 1.0.1 libs?

TLSv1.1/1.2 will work if you upgrade only openssl, but you will not be  
able  
to turn it off with ssl\_protocols directive.

> As a secondary question, have any dates been thrown around as to when  
> packages will be released that enable TLS v1.1/v1.2?

TLS v1.1/1.2 support depend on openssl version. We plan to build package  
for Ubuntu 12.04, which is shipped with openssl 1.0.1, when nginx 1.2.1  
will be released.

---

<div class="post-metadata">

**Author:** ![mevans336](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/3da27b/32.png) [@mevans336](https://www.ruby-forum.com/u/mevans336)\
**Post date:** [May 3, 2012, 3:57pm UTC](https://www.ruby-forum.com/t/enabling-tls-1-1-1-2-with-ubuntu-oneiric-packages/219395/4 "2012-05-03T15:57:25Z")

</div>

Thank you Sergey. I’ll probably just wait and upgrade to 12.04 and 1.2.1  
at the same time.

Posted at Nginx Forum:

> **[Re: Enabling TLS 1.1/1.2 with Ubuntu Oneiric Packages?](https://forum.nginx.org/read.php?2,225949,226023#msg-226023)**
>
> Hello, I have the correct variables enabled in my sites-available/default and ssllabs reports that TLS v1 is available, but TLS v1.1 and TLS v1.2 are not: ssl\_protocols TLSv1.1 TLSv1.2 TLSv1 SSLv3; ssl\_ciphers RC4:HIGH:!aNULL:!MD5; ss