Nomeqc
1/6/2020 - 3:49 PM

nginx SSL/TLS 配置 TLSv1.2 和TLSv1.3

nginx_ssl.conf
content_copyfile_download

    ##
    # SSL Settings (TLSv1.2 and TLSv1.3)
    ##
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers 'TLS13+AESGCM+AES128:EECDH+AES128';
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:50m;
    ssl_session_timeout 1d;
    ssl_session_tickets off;
    ssl_ecdh_curve X25519:sect571r1:secp521r1:secp384r1;