iis如何优化https设置?
时间: 2017-03-20来源:开源中国
HDC调试需求开发(15万预算),能者速来!>>>
之前一直在用lnmp,最近尝试了一下win2008+iis7.5+php+mysql,配置https成功,可以访问,但是在网上并没有找到在iis下如何优化https,以下是用nginx时的设置:

ssl_session_timeout 20m;
ssl_session_cache shared:SSL:20m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-RC4-SHA:!ECDHE-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:ECDH-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:!RC4-SHA:HIGH:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!CBC:!EDH:!kEDH:!PSK:!SRP:!kECDH;

ssl_ecdh_curve secp384r1;
ssl_session_tickets off;
ssl_stapling on;
ssl_stapling_verify on;
ssl_stapling_file /www/ssl/stapling_ocsp;
ssl_trusted_certificate /www/ssl/chain.pem;
resolver 172.16.0.111 172.16.0.110 valid=300s;
resolver_timeout 5s;
请问在iis7.5下是否需要这些设置?要如何去设置?谢谢。
热门排行