Comment by petecooper

If you want Nginx to use TLS v1.2, this is what you need:

  ssl_protocols TLSv1.2;

…and if you compile a recent Nginx from source and bake in OpenSSL 1.1.1 while you do that, you can have TLS v1.3 with a TLS v1.2 fallback, too:

  ssl_protocols TLSv1.3 TLSv1.2;

See also:

https://caniuse.com/#feat=tls1-2

https://caniuse.com/#feat=tls1-3