Difference between revisions of "Template:Nginx SSL directives"
Jump to navigation
Jump to search
↑ http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
: <code>[[ssl_certificate]] /etc/nginx/ssl/example.[[pem]];</code> | : <code>[[ssl_certificate]] /etc/nginx/ssl/example.[[pem]];</code> | ||
: <code>[[ssl_certificate_key]] /etc/nginx/ssl/example.key;</code> | : <code>[[ssl_certificate_key]] /etc/nginx/ssl/example.key;</code> | ||
| − | : <code>ssl_protocols | + | : <code>[[ssl_protocols]] [[TLS]]v1 [[TLS]]v1.1 TLSv1.2 TLSv1.3;</code> |
: <code>ssl_prefer_server_ciphers on;</code> server ciphers should be preferred over client ciphers when using the [[SSLv3]] and [[TLS]] protocols<ref>http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers</ref> | : <code>ssl_prefer_server_ciphers on;</code> server ciphers should be preferred over client ciphers when using the [[SSLv3]] and [[TLS]] protocols<ref>http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers</ref> | ||
| Line 7: | Line 7: | ||
:<code>[[ssl_certificate]] /etc/[[letsencrypt]]/live/www.example.com/fullchain.pem;</code> | :<code>[[ssl_certificate]] /etc/[[letsencrypt]]/live/www.example.com/fullchain.pem;</code> | ||
:<code>ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;</code> | :<code>ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;</code> | ||
| + | |||
| + | :<code>[[ssl_session_timeout]]</code> | ||
| + | :<code>[[ssl_ciphers]]</code> | ||
Latest revision as of 08:00, 4 March 2021
ssl_certificate /etc/nginx/ssl/example.pem;ssl_certificate_key /etc/nginx/ssl/example.key;ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;ssl_prefer_server_ciphers on;server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols[1]
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;
Advertising:
