SSL

Deprecated since 2011. See TLS

• OpenSSL
• LibreSSL
• wolfSSL
• BoringSSL

nginx.conf

ssl_certificate /etc/nginx/ssl/example.pem;

ssl_certificate_key /etc/nginx/ssl/example.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_prefer_server_ciphers on; server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols

ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;

ssl_session_timeout

ssl_ciphers

Errors

• unable to get local issuer certificate

Related

• openssl
• sslscan
• SSL_ERROR_UNRECOGNIZED_NAME_ALERT
• SSL Certificate Checker
• 526 Invalid SSL certificate

See also

• HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL, openSSL, WebSockets, WebRTC, ssl_certificate QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers, --insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1
• Nginx: nginx -t, nginx.conf, /etc/nginx/fastcgi.conf, Nginx Sample Configurations, server, ssl_certificate, redirect, return, rewrite, sendfile, request_uri, server_name, listen, /etc/nginx/snippets/, /etc/nginx/sites-enabled/default
• SSL: OpenSSL, LibreSSL, wolfSSL, BoringSSL, SSL pinning, /etc/ssl/certs/, ca-certificates, /etc/ssl/, sslscan2

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers