nginx配置https

来源：互联网发布：全角替换为半角 js 编辑：程序博客网时间：2024/04/29 04:26

# config https for nginx# Patricksudo yum -y install zlib-devel zlib python-devel.x86_64wget http://nginx.org/download/nginx-1.10.3.tar.gztar zxvf nginx-1.10.3.tar.gz wget https://www.openssl.org/source/openssl-1.0.1k.tar.gztar zxvf openssl-1.0.1k.tar.gzwget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.40.tar.gztar zxvf pcre-8.40.tar.gz cd nginx-1.10.3./configure --user=nobody --group=nobody --prefix=/usr/local/nginx --with-http_stub_status_module --with-cc-opt='-O3' --with-cpu-opt=opteron --pid-path=/usr/local/nginx/nginx.pid --with-http_ssl_module --with-openssl=../openssl-1.0.2k  --with-pcre=../pcre-8.40make && make installecho "################################# install nginx success"cd ..

查看本地openssl版本

openssl version

将xxx.pem 和xxx.key 存放到/usr/local/nginx/cert
配置nginx.conf
vim /usr/local/nginx/conf/nginx.conf

server {    listen 443;    server_name your_hostname;    ssl on;    root html;    index index.html index.htm;    ssl_certificate   /usr/local/nginx/cert/xxxxx.pem;    ssl_certificate_key  /usr/local/nginx/cert/xxxxx.key;    ssl_session_timeout 5m;    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    ssl_prefer_server_ciphers on;    location / {        root html;        index index.html index.htm;    }}

0 0