Create an HTTPS certificate

First milestone: Create an HTTPS certificate

Create a File authentication directory

mkdir/application/nginx/key/-P

Create an authentication file under the authentication directory

2. OpenSSL req-new -x509-nodes- out Server.crt-keyout Server.key
4. ?
6. Generating a 2048 bit RSA private key
8. .......+++
10. ......................................+++
12. Writing newprivate key to ' Server.key '
14. -----
16. You is about-to is asked to-enter information that'll be incorporated
18. into your certificate request.
20. What's about-to- Enter is called a distinguished Name or a DN.
22. There is quite a few fields but can leave some blank
24. For some fields there would be a defaultvalue,
26. If you enter '. ', the field would be a left blank.
28. -----
30. Country Name (2 letter code) [Xx]:ch
32. State or province name (full name) []:BJ
34. Locality Name (eg, city) [Default CITY]:BJ
36. Organization Name (eg, company) [Default company LTD]: Enter
38. Organizational Unit Name (eg, section) []: Enter
40. Common name (eg, your name or your server ' s hostname) []: Enter
42. Email Address []: Enter

Write Nginx configuration file (configured on load balancer)

2. Worker_processes 1;
4. Events {
6. ???? Worker_connections 1024;
8. }
10. HTTP {
12. ???? Include Mime.types;
14. ???? Default_type Application/octet-stream;
16. ???? Sendfile on;
18. ???? Keepalive_timeout 65;
20. ???? Upstream Www_pools {
22. ?????? Server 10.0.0.8;
24. ???}
26. ???? Upstream Bbs_pools {
28. ?????? Server 10.0.0.7;
30. ???}
32. ???? Upstream Blog_pools {
34. ?????? Server 10.0.0.9;
36. ????}
38. ???? server {
40. ???????? Listen 443 SSL;
42. ???????? Listen 80;
44. ???????? server_name www.etiantian.org;
46. ???????? SSL_CERTIFICATE/APPLICATION/NGINX/KEY/SERVER.CRT;
48. ???????? Ssl_certificate_key/application/nginx/key/server.key;
50. ???????? Ssl_session_cache shared:ssl:1m;
52. ???????? Ssl_session_timeout 5m;
54. ???????? Ssl_ciphers high:!anull:! MD5;
56. ???????? Ssl_prefer_server_ciphers on;
58. ???????? Location/{
60. ???????????? Proxy_pass http://www_pools;
62. ???????????? Proxy_set_header Host $host;
64. ???????????? Proxy_set_header x-forwarded-for $remote _addr;
66. ????????}
68. ????}
70. ???? server {
72. ???????? Listen 80;
74. ???????????? server_name bbs.etiantian.org;
76. ???????? Location/{
78. ???????????? Proxy_pass http://bbs_pools;
80. ???????????? Proxy_set_header Host $host;
82. ???????????? Proxy_set_header x-forwarded-for $remote _addr;
84. ????????}
86. ????}
88. ???????? server {
90. ???????? Listen 80;
92. ???????????? server_name c.etiantian.org;
94. ???????? Location/{
96. ???????????? Proxy_pass http://bbs_pools;
98. ???????????? Proxy_set_header Host $host;
100. ???????????? Proxy_set_header x-forwarded-for $remote _addr;
102. ????????}
104. ????}
106. ?
108. ???? server {
110. ???????? Listen 80;
112. ???????????? server_name blog.etiantian.org;
114. ???????? Location/{
116. ???????????? Proxy_pass http://blog_pools;
118. ???????????? Proxy_set_header Host $host;
120. ???????????? Proxy_set_header x-forwarded-for $remote _addr;
122. ????????}
124. ????}
126. }

Test

Create an HTTPS certificate