Nginx 配置 443 端口后如何屏蔽 openssl s_client -connect 证书信息

要屏蔽使用 openssl s_client -connect 命令显示证书信息，可以在 Nginx 的配置文件中添加以下配置：

ssl_dhparam /etc/nginx/dhparams.pem;
ssl_ecdh_curve secp384r1;
ssl_session_timeout 10m;
ssl_session_cache shared:SSL:10m;
ssl_protocols TLSv1.2;
ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
ssl_prefer_server_ciphers on;

location / {
    # your other configuration options
    ssl_verify_client off;
}

这些配置会禁用证书验证，从而阻止 openssl s_client -connect 命令显示证书信息。