具有各种客户端的通用服务器，十分推荐使用

版本参数

服务器版本 11.0.1

OpenSSL 版本 3.4.0

HSTS & OCSP

tomcat 11.0.1, intermediate config

tomcat 11.0.1, intermediate config

支持 Firefox 27, Android 4.4.2, Chrome 31, Edge, IE 11 on Windows 7, Java 8u31, OpenSSL 1.0.1, Opera 20, Safari 9

<!-- generated 2025-07-22, Mozilla Guideline v5.6, Tomcat 11.0.1, intermediate configuration
https://app.certbase.com/certhub/tools/ssl-config#server=tomcat&version=11.0.1&config=intermediate&guideline=5.6 -->

<Connector
  port="80"
  redirectPort="443" />

<Connector
  port="443"
  SSLEnabled="true">

  <!-- TLS 1.3 requires Java 11 or higher -->
  <SSLHostConfig
      ciphers="ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"
      disableSessionTickets="true"
      honorCipherOrder="false"
      protocols="TLSv1.2, TLSv1.3"/>

      <Certificate
          certificateFile="/path/to/signed_certificate"
          certificateChainFile="/path/to/intermediate_certificate"
          certificateKeyFile="/path/to/private_key" />
  </SSLHostConfig>

  <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
</Connector>