如何让网站HTTPS评级为A或者A+

65 阅读 0 评论 43 点赞

我是靠谱客的博主眼睛大手机，最近开发中收集的这篇文章主要介绍如何让网站HTTPS评级为A或者A+，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

环境说明：CentOS Linux release 7.5.1804 (Core)、nginx/1.10.0

需求：公司网站在myssl的评级只得到了B的评分，需要提升至A+

具体操作如下：

一、nginx配置文件如下

server {
listen 443;
keepalive_timeout 70;
ssl on;
ssl_certificate /usr/local/nginx/conf/ssl/full_chain_rsa.crt;
ssl_certificate_key /usr/local/nginx/conf/ssl/private.key;
ssl_session_timeout 1m;

ssl_stapling on;
ssl_stapling_verify on; # Requires nginx => 1.3.7
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
ssl_session_cache shared:SSL:1m;
ssl_session_tickets off; # Requires nginx >= 1.5.9
ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
add_header Stri