Perfect forward secrecy and HSTS with nginx
Today, I enabled perfect forward secrecy on my nginx installation. I’m writing down the config so I can easily find it later.
Certificate signing with an ePass2003
I have a fairly creative ssl setup on my webserver: I run my own ‘certificate authority’ which signs the server certificate; I have a bunch of alternative names specified; The CA …