802
edits
Changes
Jump to navigation
Jump to search
Caddy 0.11.5 - OpenSSL 1.1.1 (view source)
Revision as of 10:26, 24 September 2019
, 10:26, 24 September 2019Created page with "Below is a SSL configuration for the Caddy web server version 0.11.5, using OpenSSL version 1.1.1. This configuration file was generated by the [https://ssl-config.mozilla.org..."
Below is a SSL configuration for the Caddy web server version 0.11.5, using OpenSSL version 1.1.1. This configuration file was generated by the [https://ssl-config.mozilla.org/ Mozilla SSL Configuration Generator.]
<pre>
# generated 2019-09-12, https://ssl-config.mozilla.org/#server=caddy&server-version=0.11.5&config=intermediate
# note that Caddy automatically configures safe TLS settings
# replace example.com with your domain name
example.com
# Due to a lack of DHE support, you -must- use an ECDSA cert to support IE 11 on Windows 7
tls {
protocols tls1.2 tls1.3
ciphers ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-WITH-CHACHA20-POLY1305 ECDHE-RSA-WITH-CHACHA20-POLY1305
}
# HSTS (63072000 seconds)
header / Strict-Transport-Security "max-age=63072000"
</pre>
<pre>
# generated 2019-09-12, https://ssl-config.mozilla.org/#server=caddy&server-version=0.11.5&config=intermediate
# note that Caddy automatically configures safe TLS settings
# replace example.com with your domain name
example.com
# Due to a lack of DHE support, you -must- use an ECDSA cert to support IE 11 on Windows 7
tls {
protocols tls1.2 tls1.3
ciphers ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-WITH-CHACHA20-POLY1305 ECDHE-RSA-WITH-CHACHA20-POLY1305
}
# HSTS (63072000 seconds)
header / Strict-Transport-Security "max-age=63072000"
</pre>
