August 2017
Intermediate to advanced
278 pages
8h 53m
English
For the secure transmission of PCI DSS data with NGINX, there are a few tweaks required to achieve a standard configuration. As of version 3.2 of the standards, the use of the SSL protocol or TLS 1.0 requires additional checks and assessment. Unless it's absolutely necessary for the backwards compatibility of old equipment, we highly recommend that you disable them. Here's our working configuration:
server {
listen 443 http2 default_server;
server_name pcidss.nginxcookbook.com;
ssl_certificate /etc/letsencrypt/live/pcidss.nginxcookbook.com/ fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/pcidss.nginxcookbook.com/ privkey.pem; ssl_protocols TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5:!kEDH; ssl_prefer_server_ciphers ...Read now
Unlock full access