Difference between revisions of "Template:Nginx SSL directives"
Jump to navigation
Jump to search
↑ http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers
Line 4: | Line 4: | ||
: <code>ssl_prefer_server_ciphers on;</code> server ciphers should be preferred over client ciphers when using the [[SSLv3]] and [[TLS]] protocols<ref>http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers</ref> | : <code>ssl_prefer_server_ciphers on;</code> server ciphers should be preferred over client ciphers when using the [[SSLv3]] and [[TLS]] protocols<ref>http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers</ref> | ||
− | + | :<code>[[ssl_certificate]] /etc/[[letsencrypt]]/live/www.example.com/fullchain.pem;</code> | |
− | + | :<code>ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;</code> | |
− | <code>[[ssl_certificate]] /etc/[[letsencrypt]]/live/www.example.com/fullchain.pem;</code> | ||
− | <code>ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;</code> |
Revision as of 05:47, 1 July 2020
ssl_certificate /etc/nginx/ssl/example.pem;
ssl_certificate_key /etc/nginx/ssl/example.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols[1]
ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;
Advertising: