或许有人会问我为啥那么久不更新 其实站点一直有在维护 但是呢優子秉承不发重复 不转帖 不伪原创。因此不会发不是自己倒腾过的东西出来的
今晚睡得晚 错过了睡点 于是直接失眠了QAQ。就想着折腾点啥打发时间 看着谷歌的SSL就有了自己折腾一个和谷歌一样前卫的HTTPS的想法
闲话到此为止
支持新版本TLS协议和ECDHE_RSA加密需要最低openssl1.0.1 而CentOS6通过默认源yum安装的openssl版本只有1.0.0 是不支持新版本TLS协议和ECDHE_RSA密钥交换方式的
一开始本想自己编译openssl 后来一想 自己编译会跟系统的openssl脱节 从而产生一些问题。谷歌是最好的老师 搜到了一个自定义源 里面有已经编译好的新版本openssl
导入源【请注意 此源仅支持64位系统。32位系统的抱歉了 暂时无法找到合适的源】
CentOS5 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-5-1.noarch.rpm
CentOS6 x64:
rpm -ivh --nosignature http://rpm.axivo.com/redhat/axivo-release-6-1.noarch.rpm
通过源升级安装最新版openssl1.0.1e
yum –enablerepo=axivo update openssl
不出意外的话 确认按一次y 导入KEY按一次y 即可完成安装
此时再输入openssl查看version的话 应该会显示【OpenSSL 1.0.1e 11 Feb 2013】
重新编译nginx
印象中这步是必须的 因为似乎编译时引用了openssl的头文档 需要重新编译
即使不是不是必须的 升级到1.4.1支持spdy协议还是不错的
由于我采用的是lnmp一键包 可以直接使用一键包中的upgrade_nginx.sh升级或者重新编译。如果不是使用一键包的 大致步骤如下:
wget http://nginx.org/download/nginx-1.4.1.tar.gz
tar zxvf nginx-1.4.1.tar.gz
cd nginx-1.4.1
./configure –user=www –group=www –prefix=/usr/local/nginx【注:此处填你自己nginx安装目录 按照原先的编译参数 如果原先就没有 prefix直接去掉】 –with-http_stub_status_module –with-http_ssl_module –with-http_gzip_static_module –with-http_spdy_module【注:使用一键包的也需要修改一键包的编译参数 此处加上红色字段】 –with-ipv6
make
mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old【移除+备份老nginx的可执行文件 具体路径是看你的安装方式】
cp objs/nginx /usr/local/nginx/sbin/nginx【复制新的可执行文件进去 具体路径也是看你的安装方式】
/usr/local/nginx/sbin/nginx -t【执行新的可执行文件 测试是否配置文件有问题 具体路径同上】
make upgrade
修改nginx配置文件
需要修改的部分很多 不能像以前两三行解决了
首先
listen 你的ip:443 spdy;#新增spdy协议
SSL部分:
ssl on;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;#新增TLSv1.1 TLSv1.2
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_session_timeout 5m;#新增SSL session支持 此处和上面的是设置超时和设置cache大小 减轻负载
ssl_stapling on;
ssl_stapling_verify on;#
ssl_certificate 你的公钥.crt;
ssl_certificate_key 你的私钥.key;
ssl_prefer_server_ciphers on;#设置由服务端决定加密方式 避免不安全问题
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:RC4-SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!EDH:!kEDH:!PSK:!SRP:!kECDH;#去除所有不安全加密方式。确保不会遭受BEAST攻击。设置ECDHE_RSA正向密钥交换方式
注:红字是新增部分 蓝字可能是以前就有 如果以前有就需要加入红字部分 没有就直接添加。黑字是开启SSL加密所必需的
设置完毕后 reload nginx即可。
此时可以关闭浏览器重新访问你的SSL连接 你会发现你也变成了使用ECDHE_RSA的高级用户了
你同时可以使用SSL在线测试工具:https://www.ssllabs.com/ssltest/analyze.html。不出意外的话你应该是会得A了
这是本站的评分:https://www.ssllabs.com/ssltest/analyze.html?d=tucao.org
至于RC4的问题 我发现谷歌也在用 所以无所谓了。
如果你是考虑完全使用SSL 抛弃不加密的HTTP 可以考虑添加一个严格SSL的header
add_header Strict-Transport-Security max-age=2592000;
注意这个条目需要同时加到不经过加密的80端口的server块和经过HTTPS加密的server块。并且要在不经过加密的server块里设置跳转。设置方式不多说了 谷歌一搜一堆
使用ECDHE_RSA的优势:
1、具有良好前瞻性的密钥交换方式 保证数据安全
2、可以提升SSL握手速度 间接提升网站速度
3、和SPDY协议联合 最大限度提升HTTPS效率
至于见鬼的IE6的兼容问题呢 優子经过测试 XP 下的IE6是没有访问问题的 不需要担心。
p.s.总感觉“正向加密”这个词翻译有点怪?
~以上~
参考了以下文章:
https://blog.hasgeek.com/2013/https-everywhere-at-hasgeek
https://www.axivo.com/community/threads/upgrade-to-openssl-1-0-1-in-centos.180/
评论
Knowledge surrounding wrongful death lawsuits expands awareness regarding family rights—explore resources addressing sensitive topics found through **#** anykeyword # **#** truck accident lawyer
Resources outlining steps taken following vehicle collisions greatly assist those unfamiliar navigating complexities ahead-you’ll find checklists sharing thorough directions provided consistently throughout articles retained below ”””” ” ‘ ‘ ‘ ‘ ‘ truck accident lawyer
I’ve seen too many stories about collisions lately; it’s time for us to act! motorcycle accident lawyer
It’s interesting to see how many medical malpractice cases are filed annually in Phoenix. Learn about trends and statistics at car accident lawyer
veb-resurs bukmeker mostbet ishlab chiqarilgan ko’k ranglarda, o’rtada ajralib turadi to’plam yangi elementlar, http://nisng.com/portfolio/lorem-ipsum-9/ ular ifodalaydi asosiy turlari resurs.
Remember motorcycle accident lawyer
Daniella Levi & Associates, P.C. are the best car accident lawyers I’ve ever worked with!
If you’re in the Bronx, this car accident lawyer is truly exceptional!
I found the perfect car accident lawyer near me at Daniella Levi & Associates, P.C Car accident claim lawyer Bronx
This was a wonderful post. Check out https://www.symbaloo.com/embed/shared/AAAABajSf4EAA41_0mP89w== for more
Can’t wait to try the brunch menu at my preferred Brecksville dining establishment next weekend! brecksville restaurant
Currently it seems like Drupal is the best blogging platform out there right now.
(from what I’ve read) Is that what you are using on your blog?
situs tombolbet88的最新文章:situs tombolbet88
. As we witness shifting dynamics concerning insurance coverages related specifically towards certain types involving automobiles versus public transportation modes utilized frequently around town—it becomes clear why underst personal injury lawyer
Thankful for the thorough inspection provided by A Buyer’s Choice—definitely the best choice around here! Visit Home inspector for more
Not only did I sell my house fast, but I also felt supported every step of the way with Home Buyers That Care local home buyers phoenix
Appreciate the detailed post. Find more at albergue en Palas de Rei
The team at Mango apartment movers was friendly and worked quickly Cheap movers Mango
I can’t stress enough how important it is to choose reliable long-distance moving services! Check what’s recommended on Lochloosa apartment movers for Lochloosa
I appreciate the detailed information on the different types of accident cases that Moseley Collins Law takes; it’s very helpful! motorcycle accident lawyer
Appreciate the insightful article. Find more at contadores en Saltillo
I had a wonderful experience at Visual Eyes Optical Inc!
The eye doctor at Visual Eyes Optical Inc was incredibly helpful eye care professionals in Stanhope
Эта тема просто бесподобна 🙂 , мне нравится )))
however these bonuses allow to clients save their winnings, and the https://water-server7.com/2019/04/15/%e3%82%af%e3%83%aa%e3%82%af%e3%83%a9%e3%81%ae%e3%82%a6%e3%82%a9%e3%83%bc%e3%82%bf%e3%83%bc%e3%82%b5%e3%83%bc%e3%83%90%e3%83%bc/ offers a risk-free chance receive winnings natural money.
Can individuals purchase their own shockwave therapy machines for home use, and if so chiropractor Louisville KY
Anyone else moved far away recently? Share your experiences or ask questions here! Also check out ##### anyKeywords##### if needing expert advice! Mount Dora commercial movers
This was a wonderful post. Check out taxi Arzúa for more
The designs at furniture store near me are so entertaining! It’s difficult to pick simply one piece
I appreciate your information on dairy sourcing. It’s crucial for businesses to connect with a trustworthy pitco foods grocery wholesale
Bay Win, dijital bahis dunyas?nda populer olan bir hizmettir. Kullan?c?lar?na sundugu zengin oyun icerikleri, kolay giris olanaklar? ve guven veren hizmeti ile kullan?c?lar? kendine cekmektedir.
Bilhassa Baywin’e giris yapmak ve guncel giris adresleri, kullan?c? kitlesi ac?s?ndan onemli basl?klar aras?nda yer al?r.
Baywin Nedir?
Bay Win, cevrimici bahis ve casino oyunlar? alan?nda basar?l? bir markad?r. futbol bahisleri, poker ve baccarat, sanal futbol gibi cesitli oyun turlerine sahiptir.
Platformun en onemli ozelliklerinden biri, kazanc oranlar?n? maksimize etmesidir. Ayr?ca, kolay ve h?zl? odeme yontemleri, maddi kazanclar? kolayca yonetmeyi mumkun k?lar.
Baywin Giris Sorunlar? ve Cozumleri
Web: http://datechengvn.com/wordpress/?paged=22
Bahis platformunun erisim k?s?tlamalar?yla kars?lasmas? kac?n?lmazd?r, ancak bu tur durumlar icin Platformun yonetimi cozumler sunmaktad?r.
Giris adresine erisilemediginde, an?nda bir guncel adres tan?mlan?r. Boylelikle, Baywin guncel giris adresi uzerinden sorunsuz bir sekilde siteye ulas?labilir.
Platforma yeniden erisim icin mobil ve masaustu erisim saglanabilir. Cep telefonlar?, pratik cihazlar ve masaustu bilgisayarlar uzerinden oyunlara kat?lmak mumkundur. bahisseverlerin her ortamda platforma erisimini mumkun k?lar.
My experience with chiropractic treatment from a ##Puyallup Chiropractor## has been Puyallup prenatal chiropractor
How do you choose the right personal injury lawyer? Local reviews for attorneys in Garl garland auto accident lawyers
Great read on the evolving landscape of SEO strategies! Staying updated is key, and I share my latest findings at SEO Agency
I had an incredible experience at the Dental Group of Beverly Hills! The best dentist I’ve ever visited!
If you’re looking for a dentist near me emergency dentist near me
Internet-based gambling hubs have revolutionized the gambling scene, offering a level of user-friendliness and selection that brick-and-mortar casinos don’t provide. Throughout the last ten years, countless gamblers internationally have adopted the pleasure of digital casino play due to its always-open nature, exciting features, and progressively larger catalogs of games.
If you’re a beginner with the world of digital casinos or hope to explore trusted platforms, why not join our vibrant interactive platform? It’s a hub where gamblers share insights, making it easier for you to enjoy more of your virtual play. Join the connections and check it out now:
One of the biggest attractions of online gaming options is the astounding diversity of choices at your disposal. Whether you are a fan of rolling traditional reel games, trying out narrative-rich visual slot games, or playing smart in table games like poker, casino websites boast limitless opportunities. A large number of platforms also introduce live casino options, making it possible for you to engage with human game hosts and other players, all while enjoying the immersive vibes of a brick-and-mortar establishment right at home.
Adding to the extensive catalog, virtual gaming providers excel constant connectivity.
Witnessing firsth personal injury attorneys in texas
Enjoy the thrill of betting with 4rabet with seamless access through 4rabet login . Whether you enjoy placing bets on 4rabet or virtual casino action, this site brings it all under one roof. Get the 4rabet application for quick and seamless gaming to your top picks . Explore the 4rabet official website now and experience the thrill of 4rabet . Sign up with 4rabet and elevate your casino fun to the highest peak !
Experience the adrenaline rush of 4rabet , your best destination for sports betting and thrilling bets in India. Whether you’re a fan of basketball or different events , the 4rabet official website provides a easy-to-use system to wager online and maximize your profits. With the 4rabet app login , you can enter your betting profile 24/7 , from anywhere , guaranteeing you stay in the game. The 4ra bet platform is designed for both first-time users and experts , offering a vast collection of gambling choices and slot machines .
Become a part of the 4rabet gaming network today and enjoy a safe , intuitive gaming environment . Whether you enjoy accessing your account on your PC or tablet, the 4rabet betting journey is unmatched . Kick off your betting experience with 4 ra bet and take your casino fun to another level !
Link: https://www.gpmateo.es/climatizacion/2025/01/05/discover-4rabet-official-online-website-your-ultimate-destination-for-sports-betting-and-casino-in-india/
The 4rabet platform brings a easy process for online gambling and betting lovers in India. With the secure sign-in process being quick and encrypted, players can log into their betting dashboards in seconds . The 4rabet app login guarantees convenience for those on the go , allowing them to enjoy their favorite games . 4 rabet offers a vast selection of sports events, including cricket , and more , designed for Indian bettors . The betting hub is beginner-friendly, ensuring smooth access for both new users and high-stakes users to use . By accessing the official gaming page, members can take advantage of exclusive promotions. The betting system is known for its strong reputation and instant cashouts, providing a trustworthy gaming experience . Whether you love sports betting or playing slots , 4rbet has everything you need .
I recently used a locksmith in New Orleans and was impressed by their professionalism 24 hour locksmiths in New Orleans
I can’t thank Summit Services enough for their quick response Electrician
When facing a tough situation accident lawyer arlington tx
A huge thumbs up for client service at this beautiful Brecksville dining establishment! downtown restaurant in brecksville
Enjoy the excitement of betting with 4rabet with quick login through your 4rabet account . Whether you’re a fan of placing bets on 4rabet or virtual casino action, our platform brings it all in one place . Get the 4rabet application for instant and easy access to your favorite games . Check out the 4rabet homepage right away and experience the world of 4ra bet excitement . Register now and elevate your casino fun to the next level !
Experience the excitement of the 4rabet platform , your go-to site for sports betting and thrilling bets in India. Whether you love football or different events , the main 4rabet site features a seamless interface to enjoy betting and earn rewards . With the mobile access to 4rabet , you can enter your account at any moment, wherever you are, making sure you stay in the game. The 4rabet betting site is made for both first-time users and seasoned players , featuring a wide range of wagering opportunities and slot machines .
Join the 4rabet online community now and enjoy a secure , user-friendly betting system. Whether you prefer using 4rabet on your computer or mobile , the 4rbet experience is top-tier. Kick off your betting experience with the 4rabet platform and take your casino fun to another level !
Link: https://blogs.ncl.ac.uk/education/2015/10/19/it-takes-a-village-to-raise-a-sole/
4rabet India offers a seamless process for casino enthusiasts and casino fans in India. With the 4rabet login process being fast and encrypted, players can log into their betting dashboards without issues. The smartphone access ensures accessibility for mobile users , enabling them to enjoy their favorite games . The 4rabet website offers a extensive list of sports events, including basketball, and more , catering to Indian audiences. The website is easy to navigate , ensuring smooth access for both new users and high-stakes users to use . By visiting the 4rabet official website , users can take advantage of high-value rewards . The betting system is famous for its reliability and quick withdrawals , guaranteeing a trustworthy online gambling journey. Whether you enjoy gambling on matches or casino games , our platform has the perfect choice for you.
I’ve never felt better since visiting North Atlanta Chiropractic Center! They’re the best chiropractor in town.
North Atlanta Chiropractic Center is my go-to chiropractor in Duluth Duluth chiropractic health centers
Ik heb onlangs een nieuwe t delft mondhygiënist
Jubilant celebrations await those willing take plunge leap faith believing wholeheartedly possibilities limitless if pursued diligently tirelessly till fruition realized eventually!: free instagram followers
Internet-based gambling hubs have modernized the gaming market, delivering a unique kind of convenience and range that traditional venues are unable to replicate. Over the past decade, a large audience worldwide have embraced the fun of virtual gambling as a result of its anytime, anywhere convenience, appealing qualities, and continuously increasing range of offerings.
If you’re exploring for the first time with the world of digital casinos or are looking to explore proven options, why not participate in our lively social network? It’s a place where gamblers exchange stories, helping you to get the most out of your gambling adventure. Join the conversation and learn more now:
One of the main appeals of online gaming options is the sheer diversity of games ready to play. Whether you enjoy rolling retro reel games, exploring narrative-rich video slots, or mastering skills in strategy-based games like Roulette, virtual venues provide endless opportunities. Plenty of operators furthermore feature interactive dealer games, allowing you to communicate with live hosts and other players, all while taking in the immersive environment of a real casino in your own space.
Apart from the game range, virtual gaming providers shine ease of access.
If you’re ever locked out of your car, I highly recommend finding an auto locksmith in Melbourne. They saved me during a tough situation! Check out more info at Auto locksmith inEnglishAuto locksmith Melbourne10 Melbourne professional auto locksmith Melbourne
If you’re in Brandon and need help moving Brandon moving companies
I can’t believe how affordable game repairs can be! If you’re looking for a trustworthy place, I highly suggest tree removal for any of your gaming needs
Cooking with pitaco foods products feels like having a personal chef guiding me through each meal pitco foods grocery distribution
I found this very helpful. For additional info, visit payday loans new orleans la
Glory Casino – Gloryplay
My perspective shifted entirely after reading through this piece—it encourages others not only become aware but also proactive about protecting themselves legally too!!! medical malpractice lawyer
Numerous terrific alternatives on the menu of this fantastic Brecksville dining establishment! brecksville restaurant