或许有人会问我为啥那么久不更新 其实站点一直有在维护 但是呢優子秉承不发重复 不转帖 不伪原创。因此不会发不是自己倒腾过的东西出来的
今晚睡得晚 错过了睡点 于是直接失眠了QAQ。就想着折腾点啥打发时间 看着谷歌的SSL就有了自己折腾一个和谷歌一样前卫的HTTPS的想法
闲话到此为止
支持新版本TLS协议和ECDHE_RSA加密需要最低openssl1.0.1 而CentOS6通过默认源yum安装的openssl版本只有1.0.0 是不支持新版本TLS协议和ECDHE_RSA密钥交换方式的
一开始本想自己编译openssl 后来一想 自己编译会跟系统的openssl脱节 从而产生一些问题。谷歌是最好的老师 搜到了一个自定义源 里面有已经编译好的新版本openssl
导入源【请注意 此源仅支持64位系统。32位系统的抱歉了 暂时无法找到合适的源】
CentOS5 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-5-1.noarch.rpm
CentOS6 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-6-1.noarch.rpm
通过源升级安装最新版openssl1.0.1e
yum –enablerepo=axivo update openssl
不出意外的话 确认按一次y 导入KEY按一次y 即可完成安装
此时再输入openssl查看version的话 应该会显示【OpenSSL 1.0.1e 11 Feb 2013】
重新编译nginx
印象中这步是必须的 因为似乎编译时引用了openssl的头文档 需要重新编译
即使不是不是必须的 升级到1.4.1支持spdy协议还是不错的
由于我采用的是lnmp一键包 可以直接使用一键包中的upgrade_nginx.sh升级或者重新编译。如果不是使用一键包的 大致步骤如下:
wget http://nginx.org/download/nginx-1.4.1.tar.gz
tar zxvf nginx-1.4.1.tar.gz
cd nginx-1.4.1
./configure –user=www –group=www –prefix=/usr/local/nginx【注:此处填你自己nginx安装目录 按照原先的编译参数 如果原先就没有 prefix直接去掉】 –with-http_stub_status_module –with-http_ssl_module –with-http_gzip_static_module –with-http_spdy_module【注:使用一键包的也需要修改一键包的编译参数 此处加上红色字段】 –with-ipv6
make
mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old【移除+备份老nginx的可执行文件 具体路径是看你的安装方式】
cp objs/nginx /usr/local/nginx/sbin/nginx【复制新的可执行文件进去 具体路径也是看你的安装方式】
/usr/local/nginx/sbin/nginx -t【执行新的可执行文件 测试是否配置文件有问题 具体路径同上】
make upgrade
修改nginx配置文件
需要修改的部分很多 不能像以前两三行解决了
首先
listen 你的ip:443 spdy;#新增spdy协议
SSL部分:
ssl on;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;#新增TLSv1.1 TLSv1.2
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_session_timeout 5m;#新增SSL session支持 此处和上面的是设置超时和设置cache大小 减轻负载
ssl_stapling on;
ssl_stapling_verify on;#
ssl_certificate 你的公钥.crt;
ssl_certificate_key 你的私钥.key;
ssl_prefer_server_ciphers on;#设置由服务端决定加密方式 避免不安全问题
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!EDH:!kEDH:!PSK:!SRP:!kECDH;#去除所有不安全加密方式。确保不会遭受BEAST攻击。设置ECDHE_RSA正向密钥交换方式
注:红字是新增部分 蓝字可能是以前就有 如果以前有就需要加入红字部分 没有就直接添加。黑字是开启SSL加密所必需的
设置完毕后 reload nginx即可。
此时可以关闭浏览器重新访问你的SSL连接 你会发现你也变成了使用ECDHE_RSA的高级用户了
你同时可以使用SSL在线测试工具:https://www.ssllabs.com/ssltest/analyze.html。不出意外的话你应该是会得A了
这是本站的评分:https://www.ssllabs.com/ssltest/analyze.html?d=tucao.org
至于RC4的问题 我发现谷歌也在用 所以无所谓了。
如果你是考虑完全使用SSL 抛弃不加密的HTTP 可以考虑添加一个严格SSL的header
add_header Strict-Transport-Security max-age=2592000;
注意这个条目需要同时加到不经过加密的80端口的server块和经过HTTPS加密的server块。并且要在不经过加密的server块里设置跳转。设置方式不多说了 谷歌一搜一堆
使用ECDHE_RSA的优势:
1、具有良好前瞻性的密钥交换方式 保证数据安全
2、可以提升SSL握手速度 间接提升网站速度
3、和SPDY协议联合 最大限度提升HTTPS效率
至于见鬼的IE6的兼容问题呢 優子经过测试 XP 下的IE6是没有访问问题的 不需要担心。
p.s.总感觉“正向加密”这个词翻译有点怪?
~以上~
参考了以下文章:
https://blog.hasgeek.com/2013/https-everywhere-at-hasgeek
https://www.axivo.com/community/threads/upgrade-to-openssl-1-0-1-in-centos.180/
评论
Finding trustworthy long distance movers in Lochloosa can be tough Lochloosa Mover’s
The emotional toll of being injured shouldn’t be faced alone—personal injury lawyers offer support and guidance through tough times via accident lawyer
For anyone struggling with planning their next big move: visit Mount Dora commercial movers to find expert tips and trustworthy movers in Mount Dora
If you’re in the San Diego area and have had an accident, you should definitely explore what accident lawyer has to offer
Daniella Levi & Associates, P.C. are the best car accident lawyers I’ve ever worked with!
If you’re in the Bronx, this car accident lawyer is truly exceptional!
I found the perfect car accident lawyer near me at Daniella Levi & Associates, P.C Experienced accident lawyer Bronx
The insights on personal injury cases are very informative. It’s comforting to know there are experts like Moseley Collins Law in Los Angeles truck accident lawyer
Thanks for the thorough analysis. Find more at Smile Dental Bakersfield
It’s essential that we continue discussing the importance of accountability within healthcare practices—join the conversation via # # truck accident lawyer
The blog on car accident cases was particularly enlightening motorcycle accident lawyer
Please share your experiences so we can learn from each other about road safety! car accident lawyer
Medical professionals need to be held accountable for their actions, and it’s good to see that Moseley Collins Law is on the front lines in Phoenix truck accident lawyer
Understanding negligence is key to winning a personal injury case. Dive deeper into the topic at accident lawyer
After my accident, my #caraccidentlawyer was there for me every step of the way car accident lawyer
It’s shocking how many people don’t know their rights after an accident! Educate yourself at car accident lawyer
Hi there, You’ve done a great job. I will certainly digg it
and personally suggest to my friends. I
am sure they’ll be benefited from this web
site.
Also visit my site: 50kw diesel Generator
50kw diesel Generator的最新文章:50kw diesel Generator
The role of insurance adjusters in personal injury cases can be confusing for many people in San Jose! medical malpractice lawyer
Trendi Marketing Agency’s approach to social media marketing is top-notch! digital marketing agency in dallas
Thanks for the clear advice. More at albergue en Palas de Rei
Terrific article! This is the type of info that are meant to be shared across the net.
Disgrace on the search engines for no longer positioning this
post upper! Come on over and discuss with my web
site . Thanks =)
rutinbet77.org的最新文章:rutinbet77.org
The use of practice apps has transformed my study routine—thank you for recommending them! Learn more at customer support United Ceres
Ищете то, что может засветить вашу жизнь яркими эмоциями? В нашем каталоге более 2500 анкет привлекательных девушек, готовых к интимным встречам. Каждая анкета наполнена искренними желаниями и ожиданиями, которые только ждут, чтобы быть реализованными в реальной жизни: работа в эскорте сочи
Thanks for the thorough article. Find more at contador Saltillo
Thanks for the practical tips. More at abogados Vigo
I enjoyed this post. For additional info, visit taxi Arzua
Hopeful seeing increased awareness generated surrounding resources readily accessible assisting individuals recovering physically emotionally spiritually strongly reinforces sense solidarity healing journeys embarked upon collectively together!!! personal injury lawyer
I had a wonderful experience at Visual Eyes Optical Inc!
The eye doctor at Visual Eyes Optical Inc was incredibly helpful Visual Eyes Optical Inc eye health care
Can’t believe how efficient #locksmiths are nowadays! Shoutout to professional locksmith New Orleans LA for their stellar
If you’re confused about what steps to take after an accident, consider hiring a personal injury lawyer from Dallas best attorneys in dallas texas
. Ultimately securing representation proficiently skilled adept h dallas texas personal injury attorneys
If you’re dealing with chronic pain, I suggest finding a ##Puyallup Chiropractor## to help manage it effectively Puyallup Chiropractor
I highly recommend A Buyer’s Choice for anyone in need of a reliable home inspection in St Johns County! Details at Home inspector
For anyone facing a flat tire dilemma near Dingmans Ferry, trust me roadside tire services
Wondering whether or not discounts apply if multiple referrals come through togetherwhen bookingwithw hatever’s possible includ edbyW Ilm erMovingCompany????### Wilmer Mover’s
Plinko casino spel is een opwindend games die recentelijk in de online gokindustrie zijn verschenen. Het populaire spel, oorspronkelijk ontstaan in de bekende Amerikaanse tv-show, heeft zich doorontwikkeld naar de moderne casinowereld.
Hier zullen we bespreken we alles wat je kunt leren over deze casinogame, van de fundamenten van het spel tot hoe je je kunt inzetten met echt geld en de beste strategieen om het spel te spelen.
Web: https://int-elearning.com/plinko-spel-gratis-bij-nederlandse-online-casinos/
Plinko is een simpel, maar spannend gokspel dat bekend is geworden door de Amerikaanse tv-show The Price Is Right. Het spel bestaat uit een verticale speelstructuur met een aantal spijlen waar een bal van bovenaf doorheen doorheen rolt. De bal kaatst af van de pinnen en valt een van de vakken aan de onderkant, die elk een bepaald bedrag tonen. De bedragen is afhankelijk van de bal valt. Dit betekent dat het een spel van toeval is, waarbij spelers niet altijd kunnen raden waar de bal terecht zal komen.
Hoewel de basismechanismen van het spel helder zijn, maakt de randomheid van het spel het spannend en uitdagend. Dit is een van de redenen waarom Plinko zo beroemd is geworden. Het wordt vaak aangeboden als een online versie van het spel in verschillende online digitale gokplatforms, waar spelers kunnen proberen om geld te verdienen door te in te voeren op de uitkomst van hun Plinko ballen.
Wanneer je een Plinko casino game speelt, lijkt het spel erg vergelijkbaar met de bekende tv-versie. De verschillen liggen in de wijze waarop je gokken kunt en het feit dat je kunt spelen voor echt geld. In plaats van voor gewonnen prijzen zoals in de tv-show, kun je in een online casino inzetten met echt geld. De beloningen worden bepaald door waar het doelvak waarin de bal terechtkomt afhankelijk van de plaats van de bal.
Je kunt je eigen inzet bepalen, en gebaseerd op je inzet kunnen de winsten fluctueren. De Plinko spel op het internet wordt vaak aangeboden met een gebruiksvriendelijke interface, wat het voor starters makkelijker maakt om het spel snel te leren. Veel online casino’s bieden een Plinko game download optie, zodat je het spel kunt spelen op je mobiel, zelfs zonder altijd online te zijn. Dit biedt meer vrijheid en maakt het spel gemakkelijker.
Heya i’m for the primary time here. I came across this board and I find
It truly helpful & it helped me out a lot. I’m hoping
to present one thing back and aid others like you aided me.
برامج سياحية في السعودية的最新文章:برامج سياحية في السعودية
I had an incredible experience at the Dental Group of Beverly Hills! The best dentist I’ve ever visited!
If you’re looking for a dentist near me what dentist is open now in Beverly Hills
This was highly educational. For more, visit Smyle Dental Bakersfield
Virtual gambling platforms have revolutionized the betting scene, offering a level of comfort and variety that conventional establishments fall short of. Over time, a large audience globally have turned to the adventure of online gaming in light of its ease of access, engaging traits, and widening range of offerings.
If you’re a beginner with the world of virtual casino play or want to find out more about trusted platforms, why not join our active interactive platform? It’s a platform where enthusiasts share insights, guiding you to enhance your casino activities. Check out the connections and visit us now: https://wifidb.science/wiki/User:ArletteDarr4
One of the key draws of internet-based platforms is the incredible diversity of entertainment options ready to play. Whether you enjoy rolling vintage slot machines, diving into narrative-rich visual slot games, or playing smart in strategy-based games like poker, casino websites provide endless possibilities. Many casinos moreover include live casino options, allowing you to interact with professional croupiers and other players, all while enjoying the engaging atmosphere of a traditional gambling venue in your own space.
Besides the wide selection, virtual gambling platforms stand out seamless entry.
Quick cash offers are just one of the many reasons why I’m grateful I chose Home Buyers That Care when selling my home in Phoenix! first-time home buyers phoenix
Cricket Nets Dubai provides the ideal training environment
for cricketers of all ability levels seeking to improve their game.
Whether you are an amateur player or an expert cricketer,
practicing in top quality cricket webs helps enhance batting, bowling, and fielding methods.
Dubai has actually become a preferred center for cricket
training, providing some of the very best facilities
with advanced equipment, expert training, and properly maintained pitches.
The enhancing appeal of cricket in Dubai has resulted in the advancement of first-rate technique nets that supply an organized and controlled setting for gamers to improve their skills.
Interior cricket nets in Dubai offer year-round training opportunities, making them
ideal for gamers that intend to train despite the climate condition.
These centers provide a secure and enclosed atmosphere that enables gamers to focus
on their video game with no distractions. Geared
up with professional-grade netting, synthetic turf,
and automated bowling equipments, indoor cricket nets help players
work on their batting stance, shot option, and bowling precision. Training in a climate-controlled setting
ensures that cricketers can practice in a consistent and nonstop fashion. The encased arrangement additionally improves muscle
mass memory, response time, and general precision, which are vital
for affordable cricket. Exterior cricket webs in Dubai provide a more match-like experience, allowing players to educate on natural turf wickets in open areas.
These practice webs are made for both beginners and progressed cricketers that intend
to establish their skills in practical having
fun problems. The properly maintained pitches, safety netting, and advanced training tools
make certain that gamers get the very best feasible technique experience.
Exercising in outside nets aids players boost their flexibility, footwork, and fielding
reflexes, which are crucial for match efficiency.
Outdoor cricket webs additionally offer bowlers
the opportunity to work on their line and length while imitating real-game conditions.
Cricket webs in Dubai accommodate private gamers, groups, and clubs looking for organized training programs.
The visibility of expert training personnel makes certain that
players get individualized training tailored to their ability degree.
Lots of cricket internet facilities in Dubai provide coaching services from
skilled experts, aiding players improve their batting method, bowling precision, and
fielding sychronisation. Whether concentrating on quick bowling, spin techniques, power hitting, or
wicket-keeping drills, cricket webs supply a specialized space for
fine-tuning all facets of the game. Normal practice in cricket nets
assists players build confidence, boost uniformity, and obtain a
competitive edge. Booking cricket internet in Dubai is
easy, with numerous centers supplying adaptable rental choices for
people and groups. These cricket nets can be booked for personal practice sessions, team training, or event prep work.
The accessibility of properly maintained practice locations, progressed training
approaches, and performance analysis devices makes Dubai
one of the leading areas for cricket training. Practicing in top
quality cricket nets ensures that players develop their skills in a specialist setup.
The structured training setting at these cricket webs fosters teamwork,
discipline, and sportsmanship, making them a vital part of any kind of cricketer’&
rsquo; s trip. The facilities at cricket internet in Dubai include top-notch training tools such as high-speed bowling
devices, fielding technique zones, and batting cages.
These attributes give players with the chance
to improve their method and best their video game under the support of professional
trains. Cricket internet aid players deal with different facets of the
game, consisting of batting drills, bowling
accuracy, and fielding reflexes. The existence of properly maintained equipment and professional mentoring makes sure that gamers can concentrate on their training without any distractions.
Cricket internet in Dubai use a secure and controlled atmosphere that encourages gamers to push their limits and
improve their overall performance. Dubai is home
to a vivid cricketing community, with players from various histories collaborating to educate and compete.
The city’& rsquo; s world-class cricket training framework has
actually drawn in gamers from all over the world that
look for premium mentoring and method centers.
Cricket internet in Dubai supply a structured approach to skill growth, aiding
players of all levels improve their methods and obtain important match experience.
The properly maintained pitches and specialist training personnel make certain that
every gamer gets the very best feasible training. Whether preparing for an affordable match or just seeking to enhance cricketing skills, the cricket internet in Dubai offer an unequaled training experience.
The organized training sessions at cricket webs in Dubai help gamers create essential skills such as maneuvering, shot choice, and
video game awareness. The presence of expert trainers guarantees that gamers receive
constant comments, allowing them to identify weaknesses and
service enhancements. The regulated atmosphere of cricket webs assists players maintain focus and
work with improving their abilities. With the availability of both interior and outside
practice areas, players can train under various conditions to improve their
adaptability and suit preparedness. The existence of bowling devices, training
equipment, and fielding drills guarantees that gamers
get extensive training that covers all aspects of cricket.
Cricket webs in Dubai are suitable for players aiming to enhance their performance
in a structured and professional setting. The schedule of high-grade tools, experienced mentoring staff, and well-kept facilities makes these training areas
the favored selection for lots of cricketers.
Practicing in cricket nets helps players develop self-confidence, improve technique,
and develop match approaches. The affordable training atmosphere promotes a solid cricketing mindset, motivating gamers
to continually boost and take their game to the following level.
With numerous training facilities throughout Dubai, gamers
have accessibility to some of the very best cricket internet available.
The cricketing culture in Dubai remains to expand, with even more
gamers joining specialist training programs to enhance their abilities.
Cricket internet supply the structure for boosting batting,
bowling, and fielding methods, permitting gamers to optimize their capacity.
The mix of structured coaching, premium facilities,
and progressed training equipment guarantees that gamers receive top-tier training.
Cricket webs in Dubai assistance players refine their game, develop suit approaches, and gain confidence
in their capabilities. Training in well-appointed practice webs provides an opportunity to develop uniformity and prepare for top-level competitors.
Cricket internet in Dubai supply a professional and structured training
atmosphere where gamers can work with their abilities under expert supervision. The accessibility of top-notch pitches, advanced training
devices, and experienced training personnel guarantees
that every cricketer obtains the best feasible
training experience. The controlled environment permits gamers to focus on skill
growth and suit prep work. Whether training for a
tournament or just looking to improve their game, cricket webs offer the best setting for dedicated technique.
Exercising consistently in a structured setting helps gamers create consistency, fine-tune strategies,
and improve general performance in cricket.
My website Thad
Thad的最新文章:Thad
Just got my delivery from furniture store near me
Couldn’t imagine tackling heavy lifting alone anymore; thankful too much exists nowadays including amazing companies such as these!! ### any Best Brandon movers
Fort Worth has some amazing fort worth personal injury lawyer who genuinely care about their clients
Appreciate the useful tips. For more, visit payday loans new orleans
Zou leuk zijn als meer praktijken open dagen organiseren waar mensen kennis kunnen maken met hun personeel en aanpak!! # # anyKeyWord # delft tandarts
I’ve never felt better since visiting North Atlanta Chiropractic Center! They’re the best chiropractor in town.
North Atlanta Chiropractic Center is my go-to chiropractor in Duluth Chiropractic therapy clinics in Duluth
Sidewalk repair is crucial in maintaining the beauty of Brooklyn sidewalk repair brooklyn
Making strides forward whilst empowering fellow creators st how to get free instagram followers
Amazing craftsmanship from A+ Gutters – our new gutters look fantastic!!## anyKeyWord Gutter installation
Thanks for the practical tips. More at SmyleDent Bakersfield