或许有人会问我为啥那么久不更新 其实站点一直有在维护 但是呢優子秉承不发重复 不转帖 不伪原创。因此不会发不是自己倒腾过的东西出来的
今晚睡得晚 错过了睡点 于是直接失眠了QAQ。就想着折腾点啥打发时间 看着谷歌的SSL就有了自己折腾一个和谷歌一样前卫的HTTPS的想法
闲话到此为止
支持新版本TLS协议和ECDHE_RSA加密需要最低openssl1.0.1 而CentOS6通过默认源yum安装的openssl版本只有1.0.0 是不支持新版本TLS协议和ECDHE_RSA密钥交换方式的
一开始本想自己编译openssl 后来一想 自己编译会跟系统的openssl脱节 从而产生一些问题。谷歌是最好的老师 搜到了一个自定义源 里面有已经编译好的新版本openssl
导入源【请注意 此源仅支持64位系统。32位系统的抱歉了 暂时无法找到合适的源】
CentOS5 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-5-1.noarch.rpm
CentOS6 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-6-1.noarch.rpm
通过源升级安装最新版openssl1.0.1e
yum –enablerepo=axivo update openssl
不出意外的话 确认按一次y 导入KEY按一次y 即可完成安装
此时再输入openssl查看version的话 应该会显示【OpenSSL 1.0.1e 11 Feb 2013】
重新编译nginx
印象中这步是必须的 因为似乎编译时引用了openssl的头文档 需要重新编译
即使不是不是必须的 升级到1.4.1支持spdy协议还是不错的
由于我采用的是lnmp一键包 可以直接使用一键包中的upgrade_nginx.sh升级或者重新编译。如果不是使用一键包的 大致步骤如下:
wget http://nginx.org/download/nginx-1.4.1.tar.gz
tar zxvf nginx-1.4.1.tar.gz
cd nginx-1.4.1
./configure –user=www –group=www –prefix=/usr/local/nginx【注:此处填你自己nginx安装目录 按照原先的编译参数 如果原先就没有 prefix直接去掉】 –with-http_stub_status_module –with-http_ssl_module –with-http_gzip_static_module –with-http_spdy_module【注:使用一键包的也需要修改一键包的编译参数 此处加上红色字段】 –with-ipv6
make
mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old【移除+备份老nginx的可执行文件 具体路径是看你的安装方式】
cp objs/nginx /usr/local/nginx/sbin/nginx【复制新的可执行文件进去 具体路径也是看你的安装方式】
/usr/local/nginx/sbin/nginx -t【执行新的可执行文件 测试是否配置文件有问题 具体路径同上】
make upgrade
修改nginx配置文件
需要修改的部分很多 不能像以前两三行解决了
首先
listen 你的ip:443 spdy;#新增spdy协议
SSL部分:
ssl on;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;#新增TLSv1.1 TLSv1.2
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_session_timeout 5m;#新增SSL session支持 此处和上面的是设置超时和设置cache大小 减轻负载
ssl_stapling on;
ssl_stapling_verify on;#
ssl_certificate 你的公钥.crt;
ssl_certificate_key 你的私钥.key;
ssl_prefer_server_ciphers on;#设置由服务端决定加密方式 避免不安全问题
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!EDH:!kEDH:!PSK:!SRP:!kECDH;#去除所有不安全加密方式。确保不会遭受BEAST攻击。设置ECDHE_RSA正向密钥交换方式
注:红字是新增部分 蓝字可能是以前就有 如果以前有就需要加入红字部分 没有就直接添加。黑字是开启SSL加密所必需的
设置完毕后 reload nginx即可。
此时可以关闭浏览器重新访问你的SSL连接 你会发现你也变成了使用ECDHE_RSA的高级用户了
你同时可以使用SSL在线测试工具:https://www.ssllabs.com/ssltest/analyze.html。不出意外的话你应该是会得A了
这是本站的评分:https://www.ssllabs.com/ssltest/analyze.html?d=tucao.org
至于RC4的问题 我发现谷歌也在用 所以无所谓了。
如果你是考虑完全使用SSL 抛弃不加密的HTTP 可以考虑添加一个严格SSL的header
add_header Strict-Transport-Security max-age=2592000;
注意这个条目需要同时加到不经过加密的80端口的server块和经过HTTPS加密的server块。并且要在不经过加密的server块里设置跳转。设置方式不多说了 谷歌一搜一堆
使用ECDHE_RSA的优势:
1、具有良好前瞻性的密钥交换方式 保证数据安全
2、可以提升SSL握手速度 间接提升网站速度
3、和SPDY协议联合 最大限度提升HTTPS效率
至于见鬼的IE6的兼容问题呢 優子经过测试 XP 下的IE6是没有访问问题的 不需要担心。
p.s.总感觉“正向加密”这个词翻译有点怪?
~以上~
参考了以下文章:
https://blog.hasgeek.com/2013/https-everywhere-at-hasgeek
https://www.axivo.com/community/threads/upgrade-to-openssl-1-0-1-in-centos.180/
评论
Mencoba strategi baru dalam permainan slot selalu menjadi tantangan yang menyenangkan – lihat apa yang berhasil bagi saya hanya dengan mengunjungi: secure visa288 link
Thanks for every other informative blog. The place
else could I get that type of info written in such a perfect means?
I’ve a challenge that I am just now operating on, and I’ve been at the glance out for such info.
วิธีชนะ บา ค่า ร่า ออนไลน์的最新文章:วิธีชนะ บา ค่า ร่า ออนไลน์
I’ve heard some great things about the emergency services from a local dentist mission viejo in Mission Viejo
Has anyone had experience with Houston auto shipping? I found some great tips on Houston car transportation services
Had a smooth experience with garden grove auto transport through the recommendations from 𝗦𝗵𝗶𝗽 𝗩𝗲𝗵𝗶𝗰𝗹𝗲𝘀 𝗚𝗮𝗿𝗱𝗲𝗻 𝗚𝗿𝗼𝘃𝗲
I was amazed at how quick and efficient my move was with the help of movers from North Richland Hills full service movers in North Richl
“Moving doesn’t have to be hard work when you have professionals on your side—check out Ponte Vedra Beach moving company
Digital casinos have modernized the gaming scene, delivering an unmatched level of comfort and range that physical venues don’t provide. Throughout the last ten years, a vast number of enthusiasts globally have turned to the pleasure of online gaming thanks to its accessibility, engaging traits, and continuously increasing catalogs of games.
If you’re unfamiliar with the world of digital casinos or would like to delve deeper into trusted platforms, why not become part of our vibrant community? It’s a space where gaming aficionados share experiences, assisting you to maximize your online casino experience. Dive into the discussions and start your journey now:
One of the biggest attractions of virtual gambling hubs is the sheer diversity of games at your disposal. Whether you are a fan of rolling classic one-armed bandits, immersing yourself in engaging modern slot games, or strategizing in strategy-based games like Blackjack, virtual venues provide endless opportunities. Numerous services moreover include interactive dealer games, allowing you to interact with live hosts and gaming peers, all while enjoying the immersive feel of a physical gaming house without leaving your home.
In addition to diversity, virtual gambling platforms excel availability.
Anyone else moving their office in Brandon? It’s worth checking out the resources on Cheap movers Brandon
Just saw a video on how to safely use a pressure washer—definitely going to follow those tips! Pressure Washing League City
Remarkable! Its genuinely awesome post, I have got much
clear idea on the topic of from this article.
plinko casino demo的最新文章:plinko casino demo
Anyone else feel overwhelmed by relocating their offices? Resources from ###without any hassle! Thanks best apartment movers in Valencia
Pin Up Казино на просторах Казахстана – это топовое казино для игроков для ценителей азарта. Здесь предоставляются отличные условия для настоящего игрового опыта. Если вы ищете качественное онлайн-казино, то Pin Up Casino станет идеальным выбором.
Преимущества Pin Up Казино
Большой ассортимент игр. В казино Pin Up представлено более 2000 видеослотов, игр с живыми крупье и автоматов. В выборе представлены лидеры игровой индустрии, такие как Play’n GO и лучшие игровые студии. Это значит, что вас ждут только качественные и увлекательные игры, адаптированные для всех устройств.
Выгодные бонусы и акции. Для новых игроков доступны щедрые приветственные бонусы, которые помогут стартовать быстрее. Постоянные акции и розыгрыши тоже доступны, кэшбэки и фриспины для верных клиентов, что делает игру ещё более захватывающей и выгодной.
Наш сайт: http://oapr.edu.kz/20/?page_id=72&paged=21
Честность и надёжность. Pin Up Казино Онлайн гарантирует полную безопасность персональных данных и выплат, чтобы гарантировать защиту данных. Лицензия гарантирует обеспечивает честные игры и быстрые выплаты призов.
Доступность на всех устройствах. Казино работает на всех мобильных девайсах, что обеспечивает доступ к играм в любом удобном месте. Мобильное приложение готово к установке или просто начать игру через мобильный браузер.
Обслуживание клиентов. В любой проблеме, служба помощи всегда к вашим услугам. Вы можете обратиться за помощью через онлайн-чат, и получить квалифицированную помощь на удобном языке.
Relocations don’t have be overwhelming when you’ve got experts on your side like Riverview commercial movers
Can all Stump grinding Pasadena
Recently saw some great reviews on social media about local movers; has anyone checked those out while searching?? efficient long distance moving Palmdale
Just wanted to drop by Las Vegas moving company
Certainly feeling empowered after absorbing knowledge presented up until now —it fuels determination within myself moving forward towards achieving goals set earlier down road ahead!: real followers from youtube free
Has anyone moved with children? I’d love to hear how you managed it! Found some good resources on comprehensive moving services Summerlin
I’m amazed by how many people lack knowledge about their rights until they’re faced with charges – get informed through criminal lawyer in winnipeg
The facts shared relating to getting older populations and their desire for excellent caregiving are eye-beginning; thanks for raising underst in home care Wichita KS A Better Solution In Home Care
This was quite helpful. For more, visit TheWinslow
Pin Up Онлайн Казино в Казахстане – это одно из самых популярных мест для ценителей азарта. Здесь предлагаются уникальные возможности для развлечений и крупных выигрышей. Если вы любите играть в хороших казино, то Pin Up Casino обеспечит всё нужное.
Преимущества онлайн казино Pin Up
Огромный выбор игр. На платформе Pin Up вы найдёте более двух тысяч игровых автоматов, игр с живыми дилерами. В каталоге игр представлены знаменитые игровые студии, включая Play’n GO и лучшие игровые студии. Это значит, что каждая игра обеспечит захватывающий опыт, оптимизированные для телефонов и ПК.
Привлекательные акции и бонусы. Новые пользователи могут рассчитывать на приветственные бонусы, которые позволят начать с большим преимуществом. Регулярные акции увеличат ваши выигрыши, кэшбэки и специальные предложения для верных клиентов, что делает каждую игру ещё интереснее.
Наш сайт: http://oapr.edu.kz/30/?page_id=151&lang=ru
Честность и надёжность. Pin Up интернет-казино гарантирует полную безопасность данных пользователей, для обеспечения конфиденциальности. Лицензия гарантирует обеспечивает честные игры и быстрые выплаты призов.
Удобство и мобильность. Pin Up прекрасно работает на смартфонах, что даёт возможность игры в любое время в любом удобном месте. Мобильное приложение готово к установке или просто играть прямо в браузере на мобильном.
Поддержка игроков. В любое время, специалисты поддержки всегда готовы помочь вам. Вы можете связаться с нашими специалистами через электронную почту, и специалисты решат проблему на вашем языке.
Can’t believe how easy my recent move was—all thanks to the insights from Cheap movers Vero Beach # regarding long-distance moving strategies
Appreciate all the practical advice on preventing drain issues; will definitely implement these suggestions! drain cleaning near me
Digital casinos have reshaped the betting market, offering a unique kind of convenience and variety that physical venues are unable to replicate. Over time, millions of players globally have welcomed the adventure of digital casino play as a result of its anytime, anywhere convenience, engaging traits, and constantly growing game libraries.
If you’re a beginner with the world of digital casinos or are looking to learn about reputable operators, why not join our vibrant social network? It’s a hub where enthusiasts offer reviews, enabling you to improve your gambling adventure. Discover the community and visit us now: https://clashofcryptos.trade/wiki/User:QILChristina
One of the key draws of online gaming options is the astounding selection of choices on offer. Whether you enjoy spinning old-school one-armed bandits, trying out narrative-rich video-based games, or playing smart in table games like Blackjack, virtual venues provide endless possibilities. Several sites furthermore feature live gaming streams, letting you to connect with human game hosts and opponents, all while immersing yourself in the authentic feel of a brick-and-mortar establishment from anywhere you want.
Beyond variety, virtual gaming providers are known for seamless entry.
Anyone looking for trusted long distance movers in St moving company in St. Petersburg
This was a fantastic read. Check out taxi arzua for more
The wait times at my dentist’s office in Mission Viejo are always minimal; love it! saddleback dental
Your explanations are so clear and easy to follow! I’m excited to try these methods on my next project hdmi repair
Appreciate the great suggestions. For more, visit casas rurales Segovia
Anyone know if there are eco-friendly options among Milwaukee vehicle shippers? Found some info on this at Milwaukee car shippers
Hopefully more people will discover how great #[ anyKeyWord #### is for their transport needs! auto transport services in Palm Bay
I enjoyed this article. Check out Dental Group Beverly Hills for more
If you’re looking for quality wood flooring in Longmont Floor Contractor
Aviator Game Online: Accessibility and Convenience
One of the key factors behind the Aviator game’s popularity is its ease of access. The online Aviator game is offered on various devices, allowing players to play it from the comfort of their homes. Whether you’re using a desktop, your mobile device, or a larger screen, the Aviator official website delivers a uninterrupted betting adventure. For players in India, the Aviator India game has become widely loved due to its straightforward nature and opportunities for big winnings. The user-friendly setup makes it convenient for beginners to pick up, while experienced players can perfect their approaches to improve results.
Link: https://sputnik.kz/20160904/154914.html
Aviator Game Download and Bonuses
For those who prefer having a dedicated app, the Aviator game download possibility is an excellent option. Many online casinos provide exclusive bonuses for installing the game, presenting users an added incentive to start playing. These promotional offers often include free bets, welcome bonuses, and other benefits that make the game even more exciting. The Aviator bonus game is another element that boosts player engagement. These bonus stages present better chances of winning or include unique challenges, giving players additional chances to profit. The combination of regular gameplay and bonus rounds ensures that the Spribe Aviator game remains fresh.
Не представляешь день без игр, но надоели ограничения? Тогда тебе на modpda.ru! ?? Здесь проверенные хаки для Android! ?? Открытые уровни – скачивай и играй без ограничений! ?? Все файлы рабочие! ??
Very informative article. For similar content, visit affordable garage door sales
Thanks for the thorough analysis. Find more at payday loans new orleans
After comparing several options Best Lancaster movers
Just wanted to share my recent experience using Austin vehicle shipping for transporting my SUV to Austin
This was highly educational. For more, visit rent a car
This was quite informative. More at klinika stomatologiczna warszawa
“Riders of LA should definitely give ###nmme #nmyk### a try! You won’t regret it Los Angeles motorcycle transportation services
Мечтаешь играть без ограничений? ?? Тогда тебе на *modpda.ru*! ?? Мы собрали самые популярные взломанные версии для Android-игр! ?? Деньги – всё бесплатно! ?? Файлы проверены!
Is it safe to pressure wash around plants? I want to be careful with my garden Pressure Washing Willis
Every business should take into consideration tapping the services of guard to shield their properties as well as employees! For those interested, I located fantastic resources at security guards austin
Why the Online Aviator Game Stands Out
One of the main reasons behind the Aviator game’s success is its accessibility. The online Aviator game is accessible on different systems, allowing players to enjoy it anywhere and anytime. Whether you’re using a desktop, a smartphone, or a portable device, the Aviator official website delivers a uninterrupted betting adventure. For gaming enthusiasts in India, the Aviator India game has become hugely popular due to its easy-to-understand mechanics and chance to earn real money. The user-friendly setup makes it easy for first-time players to learn, while experienced players can enhance their gameplay to improve results.
Link: https://sn.kz/sn-akparat-agyny/2156-a-t-be-t-r-yny-a-mola-oblysynda-y-zhol-apatynan-aza-tapty
Why Downloading the Aviator Game is Worth It
For those who value direct gaming options, the Aviator game download feature is a convenient choice. Many online casinos offer exclusive bonuses for getting the game, presenting users an added incentive to give it a shot. These bonuses often include free bets, welcome bonuses, and other benefits that make the game even more exciting. The Aviator bonus game is another aspect that enhances the thrill. These unique challenges present higher rewards or include unique challenges, giving players additional chances to profit. The combination of regular gameplay and bonus rounds ensures that the Spribe Aviator game keeps players hooked.
Virtual gambling platforms have changed the gambling scene, offering an exceptional degree of accessibility and range that land-based casinos fall short of. Throughout the last ten years, countless gamblers around the world have welcomed the pleasure of virtual gambling as a result of its anytime, anywhere convenience, thrilling aspects, and progressively larger range of offerings.
If you’re a beginner with the world of virtual casino play or are looking to delve deeper into proven options, why not sign up for our lively community? It’s a platform where fans discuss reviews, helping you to improve your gaming journey. Dive into the community and start your journey now: http://xn--hy1b215auvkxta.com/bbs/board.php?bo_table=hansam&wr_id=1268417
One of the biggest attractions of online gaming options is the vast diversity of choices at your disposal. Whether you love engaging with old-school reel games, trying out plot-filled visual slot games, or mastering skills in card and board games like Roulette, casino websites deliver countless opportunities. Many casinos furthermore feature real-time gaming experiences, giving you the chance you to communicate with real dealers and other players, all while enjoying the engaging feel of a land-based casino in your own space.
In addition to diversity, virtual gambling platforms are known for constant connectivity.
Shipping your car from Houston doesn’t have to be stressful. Find out how easy it can be at 𝗖𝗼𝘂𝗻𝘁𝗿𝘆𝘄𝗶𝗱𝗲 𝗔𝘂𝘁𝗼 𝗧𝗿𝗮𝗻𝘀𝗽𝗼𝗿𝘁 𝗛𝗼𝘂𝘀𝘁𝗼𝗻