TLS Configurator (TLSRef TLS Configurator) is an interactive web tool designed to generate secure, standardized TLS/SSL configuration templates for server software.

The main features and capabilities of TLS Configurator include:

• Broad Software Support: Generates tailored configurations for a wide range of web servers, load balancers, databases, mail servers, and runtimes—including Apache, Nginx, Caddy, HAProxy, Traefik, AWS ALB/ELB, Tomcat, Lighttpd, LiteSpeed, OpenLiteSpeed, Oracle HTTP, Go, MySQL, PostgreSQL, Redis, Postfix, Dovecot, Exim, ProFTPD, Squid, and stunnel.

• Three Standardization Profiles: Offers pre-configured security profiles tailored to different client compatibility requirements:

  • Modern: Designed for modern services with clients that support TLS 1.3 and do not require backward compatibility.

  • Intermediate: Recommended for almost all general-purpose systems supporting a wide variety of clients.

  • Old: Compatible with very old legacy clients, intended only as a last resort.

• Environment Fine-Tuning: Tailors generated configuration directives to specific target Server Versions and OpenSSL Versions.

  • Security & Performance Options: Includes toggles for HTTP Strict Transport Security (HSTS) with HTTPS redirection and OCSP Stapling.

• Ready-to-Use Templates & Testing Resources: Provides sample configuration snippets with placeholders (like example.com and local certificate paths) alongside links to TLSRef TLS Guidelines, MDN Transport Layer Security documentation, the Mozilla HTTP Observatory, and the Qualys SSL Labs Server Test.