Nginx配置HTTPS支持CHACHA20_POLY1305
August 16th, 2016
No comments
Nginx打开CHACHA20_POLY1305支持需要替换Nginx的OpenSSL库为BoringSSL或LibreSSL
具体实现替换方法请参考
Nginx替换OpenSSL为LibreSSL 请参考
https://www.lidaren.com/archives/1702
Nginx替换OpenSSL为BoringSSL 请参考
https://www.lidaren.com/archives/1705
修改nginx.conf让nginx支持CHACHA20加密算法即可
这里增加”EECDH+CHACHA20:EECDH+CHACHA20-draft:”
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; #BoringSSL 默认关闭SSLv3 ssl_protocols TLSv1 TLSv1.1TLSv1.2; |
Recent Comments