| 协议 | ssl_protocols TLSv1.2 TLSv1.3;（不启用 1.0/1.1） |
|---|---|
| 套件 | ssl_ciphers 只保留 ECDHE 与 AEAD（GCM/CHACHA20）组合，可参考 Mozilla SSL 配置生成器 intermediate 档 |
| 会话 | ssl_session_cache shared:SSL:10m; ssl_session_timeout 1d; |
| 证书 | ssl_certificate 全链文件 + ssl_certificate_key 私钥 |
nginx HTTPS server 片段
nginx HTTPS server 片段
server {
listen 443 ssl;
http2 on; # nginx 1.25.1+；旧版本写 listen 443 ssl http2;
server_name example.com;
ssl_certificate /etc/nginx/ssl/example.com.fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/example.com.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1d;
add_header Strict-Transport-Security "max-age=31536000" always;
}TLS 1.3 的套件由协议默认集合控制，不受 ssl_ciphers 影响；写 1.2 套件白名单不会限制 1.3 的协商结果。