SSL

Deprecated since 2011. See TLS

• OpenSSL
• LibreSSL
• wolfSSL
• BoringSSL

nginx.conf

ssl_certificate /etc/nginx/ssl/example.pem;

ssl_certificate_key /etc/nginx/ssl/example.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_prefer_server_ciphers on; server ciphers should be preferred over client ciphers when using the SSLv3 and TLS protocols

ssl_certificate /etc/letsencrypt/live/www.example.com/fullchain.pem;

ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;

ssl_session_timeout

ssl_ciphers

Errors

• unable to get local issuer certificate

Related

• openssl
• sslscan
• SSL_ERROR_UNRECOGNIZED_NAME_ALERT
• SSL Certificate Checker
• 526 Invalid SSL certificate

See also

• SSL: OpenSSL, LibreSSL, wolfSSL, BoringSSL, SSL pinning, /etc/ssl/certs/, ca-certificates, /etc/ssl/, sslscan2
• TLS, TLS 1.3, mTLS: OpenSSL, LibreSSL, BoringSSL, WolfSSL, X.509, .pem, SNI, CT, OCSP, Mbed TLS, ALPN, your connection is not private, SSL Certificate Checker, Wildcard certificate, JA3 fingerprint, sslcan, TLS inspection, Opportunistic TLS (StartTLS), tools
• HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL, openSSL, WebSockets, WebRTC, ssl_certificate QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers, --insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1, HTTP security, host verification, HTTP request methods

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_prefer_server_ciphers