StartSSL申请的证书配置:
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 |
server { listen 443 ssl spdy; server_name note.t4x.org; ssl_certificate note.t4x.org_bundle.crt; ssl_certificate_key note.t4x.org.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { root /var/www/site; index index.php; location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ { expires 3650d; } } } |
WoSign SSL申请的证书配置:
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 |
server { listen 443 ssl spdy; server_name note.t4x.org; ssl on; ssl_certificate note.t4x.org_bundle.crt; ssl_certificate_key note.t4x.org.key; ssl_protocols SSLv2 SSLv3 TLSv1; ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; ssl_prefer_server_ciphers on; location / { root /var/www/site; index index.php; location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ { expires 3650d; } } } |
相关文档:http://note.t4x.org/other/startssl-open-identity/
相关文档:http://note.t4x.org/environment/centos-nginx-spdy/SourceByrd's Weblog-https://note.t4x.org/environment/nginx-config-ssl-encrypted-transmission/ SourceByrd's Weblog-https://note.t4x.org/environment/nginx-config-ssl-encrypted-transmission/
申明:除非注明Byrd's Blog内容均为原创,未经许可禁止转载!详情请阅读版权申明!