#1143·openresty

The TLS protocol and algorithms are bundled together. How can the SHA1 algorithm of TLSv1.2 be removed?

Author: wangjichao9527Created Jul 28, 2026Updated Jul 28, 2026

In OpenResty 1.21.4.4, there is a configuration file in the stream block. The ssl_protocols TLSv1.2 TLSv1.3 TLSv1.1; ssl_ciphers " algorithm set is configured for a fixed port. The fixed port also supports TLSv1.1,TLSv1.2,TLSv1.3. Currently, TLSv1.2 scans the SHA algorithm. If you want to remove the SHA algorithm from TLSv1.2, ensure that TLSv1.1 can be used properly and the algorithm set and fixed port cannot be changed, is there any method?