并找到ssl_protocols指令并在行尾添加TLSv1.3,如下所示 server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name example.com; # RSA ssl_certificate /etc/letsencrypt/example.com/fullchain.cer; ssl_certificate_key /
ssl_protocols TLSv1.2TLSv1.3;# 支持的协议版本 ssl_ciphersHIGH:!aNULL:!MD5;# 加密套件 ssl_prefer_server_ciphers on;# 优先使用服务器端的加密套件 # 其他server配置...}...}1.2.3.4.5.6.7.8.9.10.11.12.13.14.15.16.17.18.19.20.21.22.23. (3) 保存并关闭配置文件。 (4) 检查Nginx配置文件的语法...
由于安全性升级的考虑,我删除了TLS1和TLS1.1。除此以外,TLS1.3的新加密套件只能在TLS1.3中使用,旧的加密套件不能用于TLS1.3。似乎所有虚拟主机都要配置才能使用TLS1.3。 ssl_early_data on; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers [TLS13+AESGCM+AES128|TLS13+AESGCM+AES256|TLS13+CHACHA20]:[EECDH...
ssl_certificate_key /etc/ssl/private/ca.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_ciphers TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:HIGH:!aNULL:!MD5; } 留心:保证更改根方位以反映您的Nginx安装。 但是,如果您按照过程构建支撑TLS的Nginx,则上...
ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305'; location / { root /var/www/html;
server{listen443ssl;server_name example.com;ssl_certificate/path/to/certificate.crt;ssl_certificate_key/path/to/private.key;ssl_protocols TLSv1.2TLSv1.3;ssl_prefer_server_ciphers on;# 可选:配置SSL会话缓存以提高性能 ssl_session_cache shared:SSL:10m;ssl_session_timeout 10m;# 可选:启用OCSPStapli...
ssl_protocols SSLv2 SSLv3 TLSv1; ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; ssl_prefer_server_ciphers on; location ~/api/(.*) { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Ssl on; ...
listen 443 ssl; server_name www.example.com; ssl_certificate /etc/ssl/certs/ca.crt; ssl_certificate_key /etc/ssl/private/ca.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_ciphers TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:HIGH:!aNULL:!MD5...
ssl_certificate_key /usr/local/nginx/conf/sm2/cloud.tencent.com.key; #先配置签名证书,再配置加密证书,签名加密证书私钥key为同一个! ssl_session_timeout 5m; ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; ssl_ciphers ECC-SM4-SM3:ECDH:AESGCM:HIGH:MEDIUM:!RC4:!DH:!MD5:!aNULL:!eNULL; ...
ssl_protocolsTLSv1TLSv1.1TLSv1.2; 度娘“nginx 证书v1.2失效”得知nginx配置了N多vhost,只要有其中一个配置文件配置了过时的ssl_protocols 那么所有的配置都会使用过时的版本。 检查Nginx配置 server{listen443ssl;server_namegranfa.example.com;# ssl on; //如果...