From 585745255aed57397b51180a333380cdb09dcdd0 Mon Sep 17 00:00:00 2001
From: wulabing <hanbing151400@gmail.com>
Date: Tue, 26 Nov 2019 10:21:00 +0800
Subject: [PATCH] =?UTF-8?q?=E6=B7=BB=E5=8A=A0tls=E7=89=88=E6=9C=AC?=
 =?UTF-8?q?=E8=B0=83=E6=95=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 install.sh | 28 ++++++++++++++++++++++++++--
 1 file changed, 26 insertions(+), 2 deletions(-)

diff --git a/install.sh b/install.sh
index 3b429c1..7e98c07 100644
--- a/install.sh
+++ b/install.sh
@@ -494,6 +494,7 @@ ssl_judge_and_install(){
         acme
     fi
 }
+
 nginx_systemd(){
     cat>/lib/systemd/system/nginx.service<<EOF
 [Unit]
@@ -515,6 +516,21 @@ EOF
 
 judge "Nginx systemd ServerFile 添加"
 }
+
+tls_type(){
+    echo "请选择支持的 TLS 版本（default:1）:"
+    echo "1: TLS1.2 and TLS1.3"
+    echo "2: TLS1.3 only"
+    read -p  "请输入：" tls_version
+    [[ -z ${tls_version} ]] && tls_version=1
+    if [[ $tls_version == 2 ]];then
+        sed -i 's/ssl_protocols.*/ssl_protocols         TLSv1.3;/' $nginx_conf
+        echo -e "${OK} ${GreenBG} 已切换至 TLS1.3 only ${Font}"
+    else
+        sed -i 's/ssl_protocols.*/ssl_protocols         TLSv1.2 TLSv1.3;/' $nginx_conf
+        echo -e "${OK} ${GreenBG} 已切换至TLS1.2 and TLS1.3 ${Font}"
+    fi
+}
 main(){
     is_root
     check_system
@@ -531,13 +547,21 @@ main(){
     nginx_conf_add
     web_camouflage
 
-    #将证书生成放在最后，尽量避免多次尝试脚本从而造成的多次证书申请
     ssl_judge_and_install
     nginx_systemd
     show_information
     start_process_systemd
     acme_cron_update
 }
-
+list(){
+    case $1 in
+        tls_modify)
+            tls_type
+            ;;
+        *)
+            main
+            ;;
+    esac
+}
 main