安装nginx支持https,

83 阅读 0 评论 55 点赞

我是靠谱客的博主任性保温杯，最近开发中收集的这篇文章主要介绍安装nginx支持https,，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

[root@localhost cert]# yum install gcc-c++ pcre pcre-devel zlib zlib-devel openssl openssl-devel

[root@localhost nginx-1.12.2]# ./configure --prefix=/etc/nginx/ --with-openssl=/usr/bin/openssl --prefix=/etc/nginx --with-http_stub_status_module --with-http_ssl_module

[root@localhost nginx-1.12.2]# make

[root@localhost nginx-1.12.2]# make install

[root@localhost nginx-1.12.2]# vi ~root/.bash_profile 添加环境变量
export PATH=$PATH:/etc/nginx/sbin

[root@localhost nginx-1.12.2]# nginx //启动

[root@localhost nginx-1.12.2]# nginx -s reload //重新加载

[root@localhost nginx-1.12.2]# nginx -s stop //停止

生成证书（见在Windows平台下自己生成crt证书_xxss120的博客-CSDN博客_生成crt证书）

nginx.conf ------------------------------

server {
listen 443;
server_name www.ehsure515.com;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root html;
index index.html index.htm;
proxy_pass http://127.0.0.1:8080;

proxy_connect_timeout 120;
proxy_read_timeout 120;
proxy_send_timeout 120;
}

ssl on;
root html;
index index.html index.htm;
ssl_certificate /etc/nginx/cert/server.crt;
ssl_certificate_key /etc/nginx/cert/server.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
}

## nginx 启动证书免密 ##

[root@localhost cert]# openssl rsa -in server.key -out server.key.unsecure