nginx部署SSL证书添加正向保密的密码套件方法,打开nginx配置文件 添加如下代码即可,

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4:!DH:!DHE;
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=15768000;