TLS
Overview
Let’s Encrypt
Nginx on CentOS/RHEL 7
yum -y install yum-utils
yum-config-manager --enable rhui-REGION-rhel-server-extras rhui-REGION-rhel-server-optional
yum install certbot-nginx
certbot --nginx
Auto renew by crontab:
15 0 * * * certbot renew --quiet
45 12 * * * certbot renew --quiet
Manual get a certificate:
certbot certonly -d example.com --manual
HSTS
HPKP
CT
Tools
- SSL Server Test (Powered by Qualys SSL Labs)
- ssllabs/ssllabs-scan: A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
- Generate Mozilla Security Recommended Web Server Configuration Files
- SteveLTN/https-portal: A fully automated HTTPS server powered by Nginx, Let’s Encrypt and Docker.
- square/certstrap: Tools to bootstrap CAs, certificate requests, and signed certificates.
- SSLMate/certspotter: Certificate Transparency Log Monitor