SSL no Gandi

1. Autentique no painel
2. clique em SSL
3. selecione o dominio
4. clique em get
5. copie o conteúdo e salve num arquivo com o nome nuevo.crt

wget https://www.gandi.net/static/CAs/GandiStandardSSLCA.pem
cat nuevo.crt GandiStandardSSLCA.pem > quijaua-me.crt
mkdir /etc/nginx/ssl/
mv quijaua-me.crt /etc/nginx/ssl/

referencias:

• https://library.linode.com/web-servers/nginx/configuration/ssl
• http://docs.nkosi.org/IRedMail_com_Nginx
• https://nicolas.perriault.net/code/2012/gandi-standard-ssl-certificate-nginx/
• http://wiki.gandi.net/en/hosting/using-linux/tutorials/ubuntu/ssl
• http://wiki.gandi.net/en/ssl/csr
• IRedMail com Nginx
• Certifcado SSL

2015

com base em

• http://wiki.gandi.net/en/ssl/csr

conforme

• https://www.ssllabs.com/ssltest/analyze.html?d=quijaua.me

faltou

• https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know
• https://weakdh.org/
• https://en.wikipedia.org/wiki/Forward_secrecy

usar sha2

documentação atual

• http://jlecour.github.io/ssl-gandi-nginx-debian/
• https://fak3r.com/2014/08/04/howto-serve-gandi-ssl-certs-in-nginx/
• http://charlieharvey.org.uk/page/gandi_sha2_intermediate_cert_ssl_tls