SSL Config Generator

Configuration Settings

Server Software

Nginx Apache HAProxy

Mozilla Config Level

Based on Mozilla's Server Side TLS guidelines

Modern
Oldest clients: Firefox 27, Chrome 30, IE 11, Win 7, Edge, Opera 17, Safari 9, Android 5.0, Java 8 Intermediate
Oldest clients: Firefox 1, Chrome 1, IE 7, Opera 5, Safari 1, Windows XP IE8, Android 2.3, Java 7 Old
Oldest clients: Windows XP IE6, Java 6

HTTP Strict Transport Security (HSTS)

Forces clients to always use HTTPS.

OCSP Stapling

Improves connection time by caching the TLS certificate's revocation status.

Configuration Settings

Generated Configuration