或许有人会问我为啥那么久不更新 其实站点一直有在维护 但是呢優子秉承不发重复 不转帖 不伪原创。因此不会发不是自己倒腾过的东西出来的
今晚睡得晚 错过了睡点 于是直接失眠了QAQ。就想着折腾点啥打发时间 看着谷歌的SSL就有了自己折腾一个和谷歌一样前卫的HTTPS的想法
闲话到此为止
支持新版本TLS协议和ECDHE_RSA加密需要最低openssl1.0.1 而CentOS6通过默认源yum安装的openssl版本只有1.0.0 是不支持新版本TLS协议和ECDHE_RSA密钥交换方式的
一开始本想自己编译openssl 后来一想 自己编译会跟系统的openssl脱节 从而产生一些问题。谷歌是最好的老师 搜到了一个自定义源 里面有已经编译好的新版本openssl
导入源【请注意 此源仅支持64位系统。32位系统的抱歉了 暂时无法找到合适的源】
CentOS5 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-5-1.noarch.rpm
CentOS6 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-6-1.noarch.rpm
通过源升级安装最新版openssl1.0.1e
yum –enablerepo=axivo update openssl
不出意外的话 确认按一次y 导入KEY按一次y 即可完成安装
此时再输入openssl查看version的话 应该会显示【OpenSSL 1.0.1e 11 Feb 2013】
重新编译nginx
印象中这步是必须的 因为似乎编译时引用了openssl的头文档 需要重新编译
即使不是不是必须的 升级到1.4.1支持spdy协议还是不错的
由于我采用的是lnmp一键包 可以直接使用一键包中的upgrade_nginx.sh升级或者重新编译。如果不是使用一键包的 大致步骤如下:
wget http://nginx.org/download/nginx-1.4.1.tar.gz
tar zxvf nginx-1.4.1.tar.gz
cd nginx-1.4.1
./configure –user=www –group=www –prefix=/usr/local/nginx【注:此处填你自己nginx安装目录 按照原先的编译参数 如果原先就没有 prefix直接去掉】 –with-http_stub_status_module –with-http_ssl_module –with-http_gzip_static_module –with-http_spdy_module【注:使用一键包的也需要修改一键包的编译参数 此处加上红色字段】 –with-ipv6
make
mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old【移除+备份老nginx的可执行文件 具体路径是看你的安装方式】
cp objs/nginx /usr/local/nginx/sbin/nginx【复制新的可执行文件进去 具体路径也是看你的安装方式】
/usr/local/nginx/sbin/nginx -t【执行新的可执行文件 测试是否配置文件有问题 具体路径同上】
make upgrade
修改nginx配置文件
需要修改的部分很多 不能像以前两三行解决了
首先
listen 你的ip:443 spdy;#新增spdy协议
SSL部分:
ssl on;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;#新增TLSv1.1 TLSv1.2
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_session_timeout 5m;#新增SSL session支持 此处和上面的是设置超时和设置cache大小 减轻负载
ssl_stapling on;
ssl_stapling_verify on;#
ssl_certificate 你的公钥.crt;
ssl_certificate_key 你的私钥.key;
ssl_prefer_server_ciphers on;#设置由服务端决定加密方式 避免不安全问题
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!EDH:!kEDH:!PSK:!SRP:!kECDH;#去除所有不安全加密方式。确保不会遭受BEAST攻击。设置ECDHE_RSA正向密钥交换方式
注:红字是新增部分 蓝字可能是以前就有 如果以前有就需要加入红字部分 没有就直接添加。黑字是开启SSL加密所必需的
设置完毕后 reload nginx即可。
此时可以关闭浏览器重新访问你的SSL连接 你会发现你也变成了使用ECDHE_RSA的高级用户了
你同时可以使用SSL在线测试工具:https://www.ssllabs.com/ssltest/analyze.html。不出意外的话你应该是会得A了
这是本站的评分:https://www.ssllabs.com/ssltest/analyze.html?d=tucao.org
至于RC4的问题 我发现谷歌也在用 所以无所谓了。
如果你是考虑完全使用SSL 抛弃不加密的HTTP 可以考虑添加一个严格SSL的header
add_header Strict-Transport-Security max-age=2592000;
注意这个条目需要同时加到不经过加密的80端口的server块和经过HTTPS加密的server块。并且要在不经过加密的server块里设置跳转。设置方式不多说了 谷歌一搜一堆
使用ECDHE_RSA的优势:
1、具有良好前瞻性的密钥交换方式 保证数据安全
2、可以提升SSL握手速度 间接提升网站速度
3、和SPDY协议联合 最大限度提升HTTPS效率
至于见鬼的IE6的兼容问题呢 優子经过测试 XP 下的IE6是没有访问问题的 不需要担心。
p.s.总感觉“正向加密”这个词翻译有点怪?
~以上~
参考了以下文章:
https://blog.hasgeek.com/2013/https-everywhere-at-hasgeek
https://www.axivo.com/community/threads/upgrade-to-openssl-1-0-1-in-centos.180/
评论
Обеспечим здоровье и комфорт вам и вашим близким https://dezcentr-spb.ru/
A good friend recommended visiting a ##Puyallup Chiropractor## for my neck issues Puyallup Chiropractor
Kudos to the crew from Mango full service movers for their dedication and effort during my move! Find them at Long distance movers Mango
Anyone thinking of moving soon should consider hiring Local movers Lochloosa Lochloosa movers
Just wanted everyone here searching around online looking into moves across states: check out what experts have shared over at ##### anyKeywords#### – pure Best Mount Dora movers
Internet-based gambling hubs have reshaped the gambling landscape, providing an exceptional degree of user-friendliness and diversity that brick-and-mortar venues are unable to replicate. Recently, a growing community internationally have turned to the excitement of internet-based gaming as a result of its anytime, anywhere convenience, exciting features, and progressively larger collections of titles.
If you’re just starting with the world of digital casinos or hope to explore reputable operators, why not engage with our dynamic community? It’s a space where gaming aficionados offer stories, assisting you to get the most out of your virtual play. Join the conversation and start your journey now: https://nervivporyadke.ru/Voprosi/vse-o-kazino-1win-ofitsialnyj-sajt-i-vhod-bonusnye-programmy-i-promo-kak-zaregistrirovatsya-i-vojti-obhod-blokirovok-cherez-zerkalo-finansovye-operatsii-i-platezhi-i-konfidentsialnost-i-zashhita
One of the most compelling reasons of online casinos is the sheer diversity of gaming experiences at your disposal. Whether you prefer rolling classic one-armed bandits, diving into theme-based video slots, or testing your strategy in card and board games like Blackjack, virtual venues deliver numerous opportunities. Many casinos also present interactive dealer games, letting you to participate with professional croupiers and other players, all while enjoying the realistic vibes of a brick-and-mortar establishment right at home.
Beyond variety, digital casino services excel availability.
Just started out adorning our visitor room; any guidance on bedding that pairs good with furnishings from furniture store near me
I’m thrilled with the outcome of my gutter installation by A+ Gutters—professional Gutter repair
Daniella Levi & Associates, P.C. are the best car accident lawyers I’ve ever worked with!
If you’re in the Bronx, this car accident lawyer is truly exceptional!
I found the perfect car accident lawyer near me at Daniella Levi & Associates, P.C P.C. accident compensation
Valuable information! Find more at albergue en Palas
Great job! Discover more at Smile Dental Bakersfield
This was very beneficial. For more, visit contadores saltillo
Helpful suggestions! For more, visit abogados Vigo
This was highly helpful. For more, visit taxi Arzua
#DingmansFerry’s charm can’t be spoiled by flats if you’ve got #roadsideassistance from ### anyKeyboard### on speed roadside tire services
I had a wonderful experience at Visual Eyes Optical Inc!
The eye doctor at Visual Eyes Optical Inc was incredibly helpful Stanhope NJ optical services
I love how Home Buyers That Care offers fair cash offers without hidden fees phoenix az home buyer programs
I appreciate how Greg followed up after our initial meeting just to ensure everything was going smoothly—it shows he cares deeply about his clients!! # # any Keyword Best Health insurance agent
Yes! Finally something about Automated Trading Bot.
Automated Trading Bot的最新文章:Automated Trading Bot
I’m so glad I chose A Buyer’s Choice for my recent home inspection; their expertise was evident throughout the process! Home inspector
Remarkable things here. I am very glad to look your article.
Thanks a lot and I’m looking forward to contact you.
Will you please drop me a mail?
Automated trading bot的最新文章:Automated trading bot
Whenever someone asks for a good HVAC company in Hollywood Ac conditioning services
Ultimately securing representation proficiently skilled adept h injury attorneys in dallas texas
If you’re confused about what steps to take after an accident, consider hiring a personal injury lawyer from Dallas accident attorney in dallas tx
Самые последние версии на dwapk.ru — всегда актуально!
I like the valuable information you provide
in your articles. I’ll bookmark your blog and check again here frequently.
I’m quite certain I’ll learn plenty of new
stuff right here! Best of luck slate roof downspouts for drainage solutions the next!
slate roof downspouts for drainage solutions的最新文章:slate roof downspouts for drainage solutions
I had an incredible experience at the Dental Group of Beverly Hills! The best dentist I’ve ever visited!
If you’re looking for a dentist near me how much is a dentist visit in Beverly Hills
Internet-based gambling hubs have transformed the gaming market, offering a level of ease and diversity that physical venues struggle to rival. Over the past decade, a growing community globally have chosen the pleasure of virtual gambling due to its accessibility, appealing qualities, and continuously increasing game libraries.
If you’re a beginner with the world of virtual casino play or hope to explore proven options, why not engage with our growing online hub? It’s a space where gaming aficionados offer stories, helping you to improve your casino activities. Explore the experience and start your journey now: https://lumienhall.ru/news/idealnyy-remont-s-lyustrami-lumien-hall/
One of the key draws of online casinos is the unparalleled range of games ready to play. Whether you enjoy spinning classic slots, playing through engaging thematic slots, or exercising tactics in classic casino games like Blackjack, virtual venues deliver limitless entertainment avenues. Plenty of operators furthermore include live gaming streams, allowing you to connect with real dealers and fellow gamblers, all while enjoying the engaging vibes of a real casino from the comfort of your home.
Adding to the extensive catalog, internet-based gambling hubs stand out constant connectivity.
Just wanted to share my appreciation for the auto locksmith in Melbourne who helped me today! Their service was top-notch. You can read more at Auto locksmith inEnglishAuto locksmith Melbourne10 Melbourne reliable auto locksmith services in Melbourne
This post is super helpful! I’ve been searching for a trustworthy plumber in Brisbane and found some great leads plumber
Excited about what’s ahead as we set roots down following successful relocation—much appreciation towards wisdom gathered via Office moving companies Brandon
Самые последние версии на dwapk.ru — всегда актуально!
Does anyone know how to choose the right ##Puyallup Chiropractor##? I want to make sure I find someone experienced Puyallup Chiropractor
This was a fantastic resource. Check out Smyle Dental Bakersfield for more
As a software project manager, I’ve tried various tools, but finding the right best crm made all the difference. The ability to collaborate in real-time and visualize tasks has streamlined our workflow significantly
Wonderful tips! Discover more at loan agency new orleans
Bringing clarity amidst confusion regarding suitable choices could never been easier thanks largely attributed towards diligent research conducted efficiently accessed easily within # # Any Keyword texas personal injury lawyers
Thanks for the thorough analysis. More info at stomatologia dziecięca warszawa
This was a great article. Check out cheap car rental toronto for more
Love how cosy the chairs are at furniture store —appropriate for long reading
Don’t let cracked sidewalks ruin your curb appeal! Call concrete sidewalk repair today for a consultation
I’ve never felt better since visiting North Atlanta Chiropractic Center! They’re the best chiropractor in town.
North Atlanta Chiropractic Center is my go-to chiropractor in Duluth Where to find a chiropractor in Duluth
Very descriptive blog, I loved that bit. Will there be
a part 2?
Crypto trading的最新文章:Crypto trading
Very rapidly this website will be famous among all blog viewers, due to it’s good articles
or reviews
Crypto Trading的最新文章:Crypto Trading
This was quite helpful. For more, visit Publicación informativa
With so many choices out there Gutter repair
This blog post is very informative! Accident cases can be complex, and it’s good to know experienced lawyers are available personal injury lawyer
Plinko casino spel is een van de spannendste uitdagingen die de voorbije tijd populair zijn geworden. Het spel zelf, oorspronkelijk ontstaan in de bekende Amerikaanse tv-show, heeft zich veranderd voor de online gokwereld.
In dit artikel bespreken we alles wat je moet weten over het Plinko spel, van de basisregels van het spel tot hoe je de kans krijgt om echt geld te winnen en de leukste manieren om het te spelen.
Web: https://bafybeiemxf5abjwjbikoz4mc3a3dla6ual3jsgpdr4cjr3oz3evfyavhwq.ipfs.dweb.link/wiki/Gustavo_Garc%C3%ADa-Siller.html
Het Plinko spel is een simpel spel dat boeiend is spanningstocht dat zijn oorsprong vindt in de tv-hit The Price Is Right. Het spel bestaat uit een verticale speelstructuur met een aantal uitstekende pinnen waar de valbal van bovenaf doorheen naar beneden rolt. De bal kaatst van de pinnen en valt een van de vakken aan de onderkant, die elk een bepaald bedrag aanduiden. De uitbetaling is afhankelijk van waar de bal vastkomt. Dit betekent dat het een random spel is, waarbij spelers niet exact kunnen voorspellen waar de bal landt.
Hoewel de basisstructuur van het spel simpel zijn, maakt de geluksaspect van het spel het opwindend en uitdagend. Dit is een van de aspecten waarom Plinko in de gokwereld zo’n hype heeft veroorzaakt. Het wordt vaak aangeboden als een Plinko spel op internet in verschillende online casino’s, waar spelers geld kunnen winnen door te gokken door te te proberen op de uitkomst van hun gokballen.
Wanneer je een Plinko casino game speelt, lijkt het spel vaak hetzelfde als de tv-uitzending van Plinko. De grootste veranderingen liggen echter in je gokopties hebt en het feit dat je met echt geld inzetbaar is. In plaats van voor rewards zoals in de serie, kun je in een online casino voor echt geld spelen. De terugbetalingen worden bepaald door waar het vak waarin de bal afkomt wordt berekend.
Je kunt je eigen inzet bepalen, en afhankelijk van hoeveel je inzet kunnen de winsten fluctueren. De Plinko spel op het internet wordt vaak aantrekkelijk gepresenteerd, wat het voor spelnovieten makkelijker maakt om het spel te begrijpen. Veel digitale casino’s bieden een Plinko game download optie, zodat je het spel kunt spelen op je mobiel, zelfs zonder internetverbinding. Dit biedt spelers gemak en maakt het spel meer bereikbaar.
Internet-based gambling hubs have changed the gaming world, offering an exceptional degree of ease and breadth that traditional casinos fall short of. Recently, a large audience across the globe have embraced the thrill of digital casino play as a result of its anytime, anywhere convenience, thrilling aspects, and constantly growing collections of titles.
If you’re a beginner with the world of virtual gambling or would like to explore proven options, why not engage with our growing gaming forum? It’s a hub where players discuss experiences, making it easier for you to maximize your gaming journey. Explore the conversation and check it out now: https://zimeng.zfk123.xyz/home.php?mod=space&uid=1703&do=profile&from=space
One of the strongest selling points of digital gambling sites is the sheer range of choices on offer. Whether you love playing on classic reel games, diving into plot-filled video slots, or testing your strategy in classic casino games like Texas Hold’em, virtual venues deliver infinite possibilities. Many casinos furthermore feature live dealer games, making it possible for you to communicate with human game hosts and gaming peers, all while enjoying the engaging vibes of a brick-and-mortar establishment from anywhere you want.
Beyond variety, virtual gaming providers are known for availability.
Don’t underestimate the importance of good movers—Mango commercial movers truly deliver quality service! Mango commercial movers