Nginx HTTPS 配置
阿新 • • 發佈:2022-04-29
本文詳細介紹了 HTTPS 配置。
GitHub:https://github.com/khs1994-website/nginx-https
完整配置檔案
HSTS
HTTP 嚴格傳輸安全(HTTP Strict transport security,HSTS),配置瀏覽器對整個域名空間使用 HTTPS 來加密
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
HPKP(廢棄)
證書加密型別
RSA
ECC
HTTPS 配置生成工具
GitHub:https://github.com/mozilla/server-side-tls
國內加速訪問
GitHub:https://github.com/khs1994-website/server-side-tls
https://khs1994.gitee.io/server-side-tls/ssl-config-generator/
https://khs1994-website.github.io/server-side-tls/ssl-config-generator/
SSL 測試網站
- https://myssl.com/
- https://httpsecurityreport.com/?report=www.khs1994.com
- https://www.ssllabs.com/ssltest/index.html