nginx部署SSL证书添加正向保密的密码套件方法

nginx部署SSL证书添加正向保密的密码套件方法,打开nginx配置文件 添加如下代码即可,

1. ssl_ciphers ECDHE–RSA–AES128–GCM–SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE;
2. ssl_prefer_server_ciphers on;
3. add_header Strict–Transport–Security max–age=15768000;