Featured Nginx Centmin Mod Nginx VHOST SPDY SSL Generator testing

palPalani · Oct 2, 2014

Hi,
i created csr and key files using method #1 - Nginx HTTPS / SSL Google SPDY configuration
Code:
openssl req -new -newkey rsa:2048 -sha256 -nodes -out starmydomain_com.csr -keyout starmydomain_com.key -subj "/C=IN/ST=TN/L=Chennai/O=M3Webware/OU=Web Development/CN=*mydomain.com"
Now, i want to create self signed certificated, how to created that one.

Also i don't know where to download the copy of 'nginxssl_gen.sh'.

eva2000 · Oct 2, 2014

I created and update my Nginx SSL guide with self signed SSL guide, please continue discussion at SSL - Creating your own self signed SPDY/3.1 SSL certificates | Centmin Mod Community

As to nginxssl_gen.sh, it's still in testing and only Premium Users have access right now - they get first access to most new alpha/beta codes/features I intend to develop

eva2000 · Oct 18, 2014

hmm with POODLE SSLv3 vulnerability forcing alot of folks to disable SSLv3 and thus IE <=7 web browser support, maybe we're another step closer to ECC 256 bit SSL certificate and ECDSA signature algoritm adoption ? Of course with ECC 256 bit SSL certificates we'd need to give up on WinXP IE8 and WinXP Chrome support too.

rdan · Jun 3, 2015

Reliable information on ECC support in mobile platforms isn’t currently available. One solution to this problem is to use the Web server to deliver different certificates based on the client’s capabilities. For instance, Apache can be configured to negotiate ECC with clients that support it, and to negotiate RSA with the remainder of the clients
Click to expand...

Is this possible with Nginx?
This is the concept I have in mind last night
Implementing multiple condition based on visitors capability.

eva2000 · Jun 3, 2015

RoldanLT said: ↑

Is this possible with Nginx?
This is the concept I have in mind last night
Implementing multiple condition based on visitors capability.
Click to expand...

Not possible with Nginx out of box. Google BoringSSL another alternative to LibreSSL and OpenSSL for Nginx can though as it supports equal preference group ciphers

Log in / Register

Forums

Get the most out of your Centmin Mod LEMP stack

Featured Nginx Centmin Mod Nginx VHOST SPDY SSL Generator testing

palPalani Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Get the most out of your Centmin Mod LEMP stack

Featured Nginx Centmin Mod Nginx VHOST SPDY SSL Generator testing

palPalani Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

rdan Well-Known Member

eva2000 Administrator Staff Member

.