test.imdst.com. key Without Password Key test.imdst.com. origin. key with Password KeyIi. Configure ssl verification for nginx
Send test.imdst.com. crt to the browser for verification, and then use test.imdst.com. key to decrypt the data sent by the browser.
Nginx server {} Configuration
server { listen 443
1. Certificate Hierarchy2. Server architectureTomcat does not require authentication client, Nginx requires authentication client3. Tomcat configuration Attention PointThe CN of the server certificate for Tomcat must be tomcat_backend4. Nginx Configuration Attention PointExport PEM format Public key from PFX file using OpenSSL
1
openssl pkcs12 -clcerts -nokeys -incert.p12 -out cert.pem
The http://wiki.nginx.org/Modules#Standard_HTTP_modules comes with all the basic modules and modules that need to be added.
1. Install nginx with SSL module
Wget http://nginx.org/download/nginx-0.8.52.tar.gz tar zxvf nginx-0.8.52.tar.gz chown root: Root nginx-0.8.52-r ap
: This article describes how to install and load ssl in Nginx. For more information about PHP tutorials, see. Nginx installation and loading ssl error solution
[Root @ jowei nginx-0.8.9] # make
Make-f objs/Makefile
Make [1]: Entering directory '/jowei
Introduction: This is a detailed page for compiling and installing nginx, PHP 11.04, MySQL, MongoDB, memcached, SSL, and SMTP in Ubuntu 5.3. It introduces the knowledge, skills, and experience related to PhP, and some PHP source code.
Class = 'pingjiaf' frameborder = '0' src = 'HTTP: // biancheng.dnbc?info/pingjia.php? Id = 339660 'rolling = 'no'>Manually compile and install
First, make sure OpenSSL and Openssl-devel are installed on the machine.
#yum Install OpenSSL#yum Install Openssl-devel
And then you issue the certificate to yourself.
#cd/usr/local/nginx/conf#openssl Genrsa-des3-out Server.key 1024#openssl Req-new-key server.key-out SERVER.CSR#openssl rsa-in server.key-out Server_nopwd.key#openssl x509-req-days 365-in server.csr-signkey server_nopwd.key-out server.crt
Now that the certificate has been generated,
Transferred from: http://feitianbenyue.iteye.com/blog/2056357Recently in a project, the structure of the use of Nginx +tomcat cluster, and nginx configuration of Ssl,tomcat no SSL, the project uses the HTTPS protocolHowever, obviously is the HTTPS URL request, found log inside,XML code
0428 15:55:55 INFO (paymentin
URL of the SSL certificate requested: https://www.pianyissl.com/Because it is a test, select free to tryThere will be a compressed package after the application.There is a Nginx folder, put the followingServer.keyServer.pemThese two files are uploaded to the server.In this I'm moving these two files into the/usr/local/nginx/conf directoryParameters are required f
Share how I am configuring SSL on the Nginx step by step.First, make sure that the OpenSSL library is installed and that the –with-http_ssl_module parameters are used when installing Nginx.
Beginners or novices recommend using LNMP for one-click installation.
To generate a certificate:Enter the directory where you want to generate the certificateCd/usr/local/
This article is 1:1 mode, N:1 mode see the New blog "SSL bidirectional authentication (HD version)"-----------------------------------------------------I'm a split line----------------------------------------------------- ----The title is too long do not know how to start, simply put the keyword listed it ~WebService's WS-* did not take a day, it seems that PHP should be completely abandon the SOAP protocol, Google turned rotten and did not find any r
Because the SSL certificate expires, so want to re-get one, here see Wosign digital certificate and then tried. It's like it's really possible. But to register an account to have a one-year term certificate, but also good.650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6E/94/wKiom1V_91fTZp2LAAO2i0Lq-qQ293.jpg "title=" QQ picture 20150616181527.png "alt=" Wkiom1v_91ftzp2laao2i0lq-qq293.jpg "/>Here choose the way two, submit yourself, otherwi
One. Nginx installation of SSL certificate requires
Two configuration Files
1_ROOT_BUNDLE.CRT , 2_domainname.com.key.
Note: These three certificate files are in folder for Nginx.zip, example:1_root_bundle.crt is the root certificate chain (public key), 2_ Domainname.com.key is the private key.
(Where: Certificate public key, private key file is usually named after your domain name; the certificate suffix C
The code is as follows
Copy Code
OpenSSL x509-req-days 3650-in hupohost.csr-signkey hupohost.key-out hupohost.crt
Here 3650 is the certificate validity period recommendation 3650 haha. This is random. The last file to use is key and CRT files.If you need to use a PFX you can use the following command to generate
The code is as follows
Copy Code
OpenSSL pkcs12-export-inkey hupohost.key-in hupohost.crt-out hupohost.pfx
Generate certificateyou can generate a simple certificate by using the following steps:First, enter the directory where you want to create the certificate and private key, for example:
$ cd/usr/local/nginx/conf
Create the server private key, the command will let you enter a password:
$ OpenSSL genrsa-des3-out server.key 1024
To create a certificate (CSR) for a signing request:
$ OpenSSL req-new-key server.key-out SE
Configure SSL certificate under Nginx, default profile, normal access in PC Browser, unable to authenticate a nginx configuration mode in Mobile browser
SSL on;
Ssl_certificate /etc/nginx/ssl/certificate.crt;
S
By default, the SSL module is not installed. To use this module, You need to specify the-with-http_ssl_module parameter during compilation. The installation module depends on the OpenSSL library and some reference files, these files are usually not in the same software package. Generally, this file name is similar to libssl-Dev.Generate Certificate
To generate a simple certificate, follow these steps:First, go to the directory where you want to create
Recently in a project, the use of enterprise, the structure of the use of Nginx +tomcat cluster, and Nginx configuration Ssl,tomcat no SSL, the project uses the HTTPS protocol, but in the debugging menu related functions found error, error information as follows:After debugging the code inside the Dofilter, found that:
1. Installing OpenSSLsudo apt-get install OpenSSLsudo apt-get install Libssl-dev2. Place the corresponding certification file Domain.crt,domain.key under/etc/nginx/sslAdd the following to the corresponding virtual host configuration file in Site-avaliableserver {Listen 443;server_name domain.com;root/var/www/project folder;Index index.php index.html index.htm;SSL on;SSL_CERTIFICATE/ETC/
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.