Nginx打开CHACHA20_POLY1305支持需要替换Nginx的OpenSSL库为BoringSSL或LibreSSL 具体实现替换方法请参考 Nginx替换OpenSSL为LibreSSL 请参考 https://www.lidaren.com/archives/1702 Nginx替换OpenSSL为BoringSSL 请参考 https://www.lidaren.com/archives/1705 修改nginx.conf让nginx支持CHACHA20加密算法即可 这里增加”EECDH+CHACHA20:EECDH+CHACHA20-draft:” ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5; #BoringSSL 默认关闭SSLv3 ssl_protocols TLSv1 TLSv1.1TLSv1.2;