NGINX HTTPS 配置

本文详细介绍了 HTTPS 配置。

GitHub:https://github.com/khs1994-website/https

完整配置文件

HSTS

HTTP 严格传输安全(HTTP Strict transport security,HSTS),配置浏览器对整个域名空间使用 HTTPS 来加密

1
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";

HPKP(废弃)

谷歌浏览器开发团队宣布将停止支持 HPKP 公钥固定

证书加密类型

RSA
ECC

HTTPS 配置生成工具

GitHub:https://github.com/mozilla/server-side-tls

国内加速访问

GitHub:https://github.com/khs1994-website/server-side-tls

https://khs1994.gitee.io/server-side-tls/ssl-config-generator/

https://khs1994-website.github.io/server-side-tls/ssl-config-generator/

SSL 测试网站

相关链接

khs1994 wechat
微信扫码赞赏我的文章
0%