Optimize SSL

cloned from Optimize SSL

By fshequin // 1 year ago

Enable SSL Session Cache, add Optimized SSL Cyphers, enable SSL Stapling. This is part of a larger SSL optimization process described here: https://laravel-news.com/2016/01/optimizing-ssl-laravel-forge.

xxxxxxxxxx
 
cat > /etc/nginx/conf.d/ssl_optimizations.conf <<EOT
# Session Cache Settings
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 180m;
​
# SSL Cyphers
ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;
​
# Enable SSL Stapling
ssl_stapling on;
ssl_stapling_verify on;
EOT
​
service nginx reload

Site maintained by Vince Mitchell.

Inspired by original by David Hemphill, Tanner Hearne, & Matt Stauffer.