Comment Comment by bungle Yes, it works with their official packages, at least. Just updated today.Here is the basic config I'm using with it: listen x.x.x.x:443 default_server deferred spdy; listen [x:x:x:x::x]:443 default_server deferred spdy ipv6only=on; spdy_headers_comp 7; ssl on; ssl_certificate /etc/ssl/private/x.crt; ssl_certificate_key /etc/ssl/private/x.key; ssl_trusted_certificate /etc/ssl/private/x.trust; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS; ssl_prefer_server_ciphers on; ssl_stapling on; ssl_stapling_verify on; resolver 8.8.8.8 x.x.x.x add_header Strict-Transport-Security "max-age=15768000; includeSubDomains"; add_header X-Frame-Options DENY; add_header Alternate-Protocol 443:npn-spdy/3; parent bungle 12 years ago
Here is the basic config I'm using with it: