Difference between revisions of "SSL"
Jump to navigation
Jump to search
↑ http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers
Line 13: | Line 13: | ||
* {{HTTPS}} | * {{HTTPS}} | ||
* {{nginx.conf}} | * {{nginx.conf}} | ||
− | |||
* {{SSL}} | * {{SSL}} | ||
[[Category:IT Security]] | [[Category:IT Security]] |
Revision as of 14:12, 13 June 2023
Deprecated since 2011. See TLS
ssl_certificate /etc/nginx/ssl/example.pem;
ssl_certificate_key /etc/nginx/ssl/example.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols[1]
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;
Related commands
See also
- HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL,
openSSL
, WebSockets, WebRTC,ssl_certificate
QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers,--insecure
, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1 - Nginx:
nginx -t
,nginx.conf
,/etc/nginx/fastcgi.conf
, Nginx Sample Configurations,server
,ssl_certificate
,redirect
,return
,rewrite
,sendfile
,request_uri
,server_name
,listen
,/etc/nginx/snippets/
,/etc/nginx/sites-enabled/default
- SSL: OpenSSL, LibreSSL, wolfSSL, BoringSSL, SSL pinning,
/etc/ssl/certs/
,ca-certificates
,/etc/ssl/, sslscan2
Advertising: