Dram

Block URL:
Block domain:

Nopassw0rd:
вебмастера вкурили про такой мизер и начали массово блокировать это объявление.

Оптимизайка:
Попробуйте сделать cp -a /etc/ssl /usr/local/ и перезапустить nginx.

nginx version: nginx/1.15.8
built by gcc 6.3.0 20170516 (Debian 6.3.0-18+deb9u1)
built with OpenSSL 1.1.1a 20 Nov 2018
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/run/nginx.pid --lock-path=/var/lock/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-pcre-jit --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-http_auth_request_module --with-http_geoip_module=dynamic --with-http_image_filter_module=dynamic --with-http_xslt_module=dynamic --with-threads --with-stream --with-stream_ssl_module --with-http_slice_module --with-mail --with-mail_ssl_module --with-file-aio --with-http_v2_module --with-cc-opt='-g -O2 -fstack-protector-strong -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,--as-needed' --with-openssl=/opt/openssl-1.1.1a --with-openssl-opt=enable-tls1_3 --add-dynamic-module=/opt/ngx_http_geoip2_module-master/ --add-module=/opt/ngx_brotli

ldd /usr/sbin/nginx | grep ssl

ldd /opt/nginx-1.15.8 | grep ssl
ldd: /opt/nginx-1.15.8: not regular file
ldd /opt | grep ssl
ldd: /opt: not regular file

начиная с версии nginx 1.15.8 корректно работает с early_data (tls 1.3 c 0-RTT)

OpenSSL 1.1.0f 25 May 2017 (Library: OpenSSL 1.1.1a 20 Nov 2018)

TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No

[default_conf]
ssl_conf = ssl_sect

[ssl_sect]
system_default = system_default_sect

[system_default_sect]
MinProtocol = None
CipherString = DEFAULT

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";

TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No

libssl1.1:
Installed: 1.1.1a-2~20181219073610.6+stretch
Candidate: 1.1.1a-2~20181219073610.6+stretch
Version table:
*** 1.1.1a-2~20181219073610.6+stretch 500
500 https://packages.sury.org/php stretch/main amd64 Packages
100 /var/lib/dpkg/status
1.1.0j-1~deb9u1 500
500 http://security.debian.org stretch/updates/main amd64 Packages
500 http://mirror.hetzner.de/debian/security stretch/updates/main amd64 Packages
1.1.0f-3+deb9u2 500
500 http://deb.debian.org/debian stretch/main amd64 Packages
500 http://mirror.hetzner.de/debian/packages stretch/main amd64 Packages

nginx:
Installed: 1.10.3-1+deb9u1
Candidate: 1.10.3-1+deb9u2
Version table:
1.14.1-1~bpo9+1 100
100 http://mirror.hetzner.de/debian/packages stretch-backports/main amd64 Packages
1.13.3-1~bpo9+1 100
100 http://mirror.hetzner.de/debian/packages stretch-backports/main amd64 Packages
1.10.3-1+deb9u2 500
500 http://security.debian.org stretch/updates/main amd64 Packages
500 http://mirror.hetzner.de/debian/security stretch/updates/main amd64 Packages
*** 1.10.3-1+deb9u1 500
500 http://deb.debian.org/debian stretch/main amd64 Packages
500 http://mirror.hetzner.de/debian/packages stretch/main amd64 Packages
100 /var/lib/dpkg/status