HPKP with letsencrypt and nginx

Get SPKI-hash

Let’s Encrypt Authority X4

curl https://letsencrypt.org/certs/lets-encrypt-x4-cross-signed.pem | openssl x509 -pubkey | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64

Let’s Encrypt Authority X3

curl https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem | openssl x509 -pubkey | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64

ISRG Root X1

curl https://letsencrypt.org/certs/isrgrootx1.pem | openssl x509 -pubkey | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | base64

Add config to nginx

add_header Public-Key-Pins 'pin-sha256="X4-Hash"; pin-sha256="X3-Hash"; pin-sha256="X1-Hash"; max-age=15768000;';

Reload nginx

nginx -s reload

• About
• Latest Posts

โซเชียล

Kawin Viriyaprasopsook

System administrator at Zercle Technology Co., Ltd.

System admin กากๆ
รักในการเล่นเกม
ชอบดู Anime ญี่ปุ่น

โซเชียล

Latest posts by Kawin Viriyaprasopsook (see all)

• [Workaround] Override docker systemd service - 2019-01-04
• Use LZ4 with tar for compress multiple directories - 2018-12-15
• Workaround openmediavault python 3.5 weakref.py error - 2018-12-14