Skip to content

Commit 5728c20

Browse files
Add example for server with both ECDSA and RSA certificates
1 parent 9195bf0 commit 5728c20

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed
Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
server {
2+
listen 443 ssl default_server;
3+
server_name yourdomain.org www.yourdomain.org;
4+
5+
# Load the ECDSA keys.
6+
ssl_certificate /etc/letsencrypt/live/test-ecc/fullchain.pem;
7+
ssl_certificate_key /etc/letsencrypt/live/test-ecc/privkey.pem;
8+
9+
# Load the RSA keys.
10+
ssl_certificate /etc/letsencrypt/live/test-rsa/fullchain.pem;
11+
ssl_certificate_key /etc/letsencrypt/live/test-rsa/privkey.pem;
12+
13+
# Load the Diffie-Hellman parameter.
14+
ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
15+
16+
# Define the ciphers to use in the preferred order.
17+
ssl_protocols TLSv1.2 TLSv1.3;
18+
ssl_prefer_server_ciphers on;
19+
ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:DHE+AESGCM:DHE:!RSA!aNULL:!eNULL:!LOW:!RC4:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA:!SEED";
20+
21+
return 200 'Let\'s Encrypt certificate successfully installed!';
22+
add_header Content-Type text/plain;
23+
}

0 commit comments

Comments
 (0)