加入收藏 | 设为首页 | 会员中心 | 我要投稿 李大同 (https://www.lidatong.com.cn/)- 科技、建站、经验、云计算、5G、大数据,站长网!
当前位置: 首页 > 运营中心 > Nginx > 正文

nginx – ssllabs一直说sslv3没有启用

发布时间:2020-12-13 21:15:29 所属栏目:Nginx 来源:网络整理
导读:https://www.ssllabs.com/ssltest/analyze.html?d=cablework.co 我无法弄清楚为什么一直说“C”.我已禁用SSLv3. 这是我的配置文件 server { listen 80; listen 443 ssl spdy; server_name cablework.co; ssl_certificate /etc/nginx/ssl/cablework.co.pem; s

https://www.ssllabs.com/ssltest/analyze.html?d=cablework.co

我无法弄清楚为什么一直说“C”.我已禁用SSLv3.

这是我的配置文件

server {
    listen 80;
    listen 443 ssl spdy;
    server_name cablework.co;
    ssl_certificate /etc/nginx/ssl/cablework.co.pem;
    ssl_certificate_key /etc/nginx/ssl/server.key;
    return 301 https://www.cablework.co$request_uri;
}
server {
    listen 443 ssl spdy;

    ssl_certificate /etc/nginx/ssl/cablework.co.pem;
    ssl_certificate_key /etc/nginx/ssl/server.key;

    ssl_ciphers 'AES256+EECDH:AES256+EDH';

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_session_cache shared:SSL:10m;

    ssl_stapling on;
    ssl_stapling_verify on;
    resolver 8.8.4.4 8.8.4.4 valid=300s;
    resolver_timeout 10s;

    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/nginx/ssl/dhparam.pem;

    charset utf-8;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    access_log off;
    error_log  /var/log/nginx/www.cablework.co-error.log error;

    error_page 404 /index.php;

    location ~ .php${
        fastcgi_split_path_info ^(.+.php)(/.+)$;
        fastcgi_pass unix:/var/run/php5-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
    }

    location ~ /.ht {
        deny all;
    }

    add_header Strict-Transport-Security max-age=63072000;
    add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;

    root /home/kryptonit3/cablework/public;
    index index.html index.htm index.php;
    server_name www.cablework.co;
}
最佳答案
您忘了为名为cablework.co的服务器指定ssl_protocols和ssl_ciphers.因此默认值 – 无论它们是什么 – 都会被使用.

(编辑:李大同)

【声明】本站内容均来自网络,其相关言论仅代表作者个人观点,不代表本站立场。若无意侵犯到您的权利,请及时与联系站长删除相关内容!

    推荐文章
      热点阅读