SSL Toolkit Logo

SSL Config Generator

Generate SSL configuration for Nginx, Apache, and HAProxy

Generated Configuration


        

Error

About Server Config Generator

Our free Server Config Generator creates optimized SSL/TLS configuration for Nginx, Apache, and HAProxy. Generate production-ready configs with modern cipher suites, protocol settings, OCSP stapling, and HSTS headers.

How to Use

  1. 1Select your web server (Nginx, Apache, or HAProxy).
  2. 2Choose the security level (Modern, Intermediate, or Old).
  3. 3Click "Generate Config" to get the optimized configuration.

Use Cases

  • Set up HTTPS on new servers
  • Harden existing SSL configuration
  • Migrate to modern TLS
  • Generate PCI DSS compliant configs

Technical Details

Supported Servers

  • Nginx, Apache, HAProxy
  • Modern (TLS 1.3), Intermediate (TLS 1.2+)

Features

  • OCSP stapling, HSTS, session tickets
  • Old (legacy support) configurations

Tips & Best Practices

  • Use Modern level unless you need to support older browsers
  • Test your configuration with SSL Labs after deployment
  • Regularly update cipher suites as new vulnerabilities are discovered

Frequently Asked Questions

Modern for maximum security (TLS 1.3 only). Intermediate for broad compatibility. Old only if you need legacy client support.
The generated config includes OCSP stapling settings. Ensure your server can reach the CA's OCSP responder.
Yes, modify the ssl_ciphers directive in the generated configuration to match your requirements.

Video Tutorial

Video tutorial coming soon