windows配置nginx https证书windows配置nginx https证书

104 阅读 0 评论 69 点赞

我是靠谱客的博主健康芹菜，这篇文章主要介绍windows配置nginx https证书windows配置nginx https证书，现在分享给大家，希望可以做个参考。

windows配置nginx https证书

申请/获取https证书
通过申请后会提供一个压缩文件下载，将解压文件中的证书信息配置到ssl_certificate 和ssl_certificate_key 中

复制代码

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
server {
        listen 443 ssl;  # 1.1版本后这样写
        server_name www.domain.com; #填写绑定证书的域名
        ssl_certificate 1_www.domain.com_bundle.crt;  # 指定证书的位置，绝对路径
        ssl_certificate_key 2_www.domain.com.key;  # 绝对路径，同上
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
        ssl_prefer_server_ciphers on;
        location / {
            root   html; #站点目录，绝对路径
            index  index.html index.htm;
        }
    }

配置完成后，重新加载nginx配置

复制代码

1
2
./nginx -s reload

完整配置如下

复制代码

server {
        listen      81;
        server_name  xxx.com;

#charset koi8-r;

#access_log  logs/host.access.log  main;

location / {
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header REMOTE-HOST $remote_addr;
			client_max_body_size 50m;
			client_body_buffer_size 256k;
			proxy_connect_timeout 1;
			proxy_send_timeout 30;
			proxy_read_timeout 60;
			proxy_buffer_size 256k;
			proxy_buffers 4 256k;
			proxy_busy_buffers_size 256k;
			proxy_temp_file_write_size 256k;
			proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
			proxy_max_temp_file_size 128m;
			
            proxy_pass http://xxx.com:80;
			proxy_set_header Host xxx.com:$server_port;
			proxy_set_header X-Forwarded-For $remote_addr;	
        }
		
	}
    server {
     listen 443;
     server_name xxx.com;
     ssl on;
     root html;
     index index.html index.htm;
     ssl_certificate   D:/soft/nginx/2915148_xxx.com_nginx/2915148_xxx.com.pem;
     ssl_certificate_key  D:/soft/nginx/2915148_xxx.com_nginx/2915148_xxx.com.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
	 
     location / {
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header REMOTE-HOST $remote_addr;
			client_max_body_size 50m;
			client_body_buffer_size 256k;
			proxy_connect_timeout 1;
			proxy_send_timeout 30;
			proxy_read_timeout 60;
			proxy_buffer_size 256k;
			proxy_buffers 4 256k;
			proxy_busy_buffers_size 256k;
			proxy_temp_file_write_size 256k;
			proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
			proxy_max_temp_file_size 128m;
			
            proxy_pass http://xxx.com:80;
			proxy_set_header Host xxx.com:$server_port;
			proxy_set_header X-Forwarded-For $remote_addr;	
        }
    }

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
server {
        listen      81;
        server_name  xxx.com;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header REMOTE-HOST $remote_addr;
			client_max_body_size 50m;
			client_body_buffer_size 256k;
			proxy_connect_timeout 1;
			proxy_send_timeout 30;
			proxy_read_timeout 60;
			proxy_buffer_size 256k;
			proxy_buffers 4 256k;
			proxy_busy_buffers_size 256k;
			proxy_temp_file_write_size 256k;
			proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
			proxy_max_temp_file_size 128m;
			
            proxy_pass http://xxx.com:80;
			proxy_set_header Host xxx.com:$server_port;
			proxy_set_header X-Forwarded-For $remote_addr;	
        }
		
	}
    server {
     listen 443;
     server_name xxx.com;
     ssl on;
     root html;
     index index.html index.htm;
     ssl_certificate   D:/soft/nginx/2915148_xxx.com_nginx/2915148_xxx.com.pem;
     ssl_certificate_key  D:/soft/nginx/2915148_xxx.com_nginx/2915148_xxx.com.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
	 
     location / {
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header REMOTE-HOST $remote_addr;
			client_max_body_size 50m;
			client_body_buffer_size 256k;
			proxy_connect_timeout 1;
			proxy_send_timeout 30;
			proxy_read_timeout 60;
			proxy_buffer_size 256k;
			proxy_buffers 4 256k;
			proxy_busy_buffers_size 256k;
			proxy_temp_file_write_size 256k;
			proxy_next_upstream error timeout invalid_header http_500 http_503 http_404;
			proxy_max_temp_file_size 128m;
			
            proxy_pass http://xxx.com:80;
			proxy_set_header Host xxx.com:$server_port;
			proxy_set_header X-Forwarded-For $remote_addr;	
        }
    }