Nginx Proxy HTTPS

server {
Listen 443;
server_name mail.jb51.net;

SSL on;
Ssl_certificate SERVER.CRT;
Ssl_certificate_key Server.key;

Location/{
Proxy_pass https://192.168.0.2:443;
Proxy_set_header Host $host: 443;
Proxy_set_header X-real-ip $remote _addr;
Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
Proxy_set_header Via "Nginx";

}
}

Where 192.168.0.2 is your HTTPS host
This can be simplified if the backend https does not have a certificate:

Copy CodeThe code is as follows:
server {
Listen 80;
server_name svn.jb51.net;

Location/{
Proxy_pass https://192.168.0.2:443;
Proxy_set_header Host $host: 443;
Proxy_set_header X-real-ip $remote _addr;
Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
Proxy_set_header Via "Nginx";
Proxy_set_header X-forwarded-proto HTTPS; #注意看这里 one more line.
}
}

If you are prompted, SSL receives a record that exceeds the maximum allowable length. "Error code" Ssl_error_rx_record_too_long "description less" SSL on; " This line

Nginx Reverse Proxy HTTPS

Description

1.nginx 1.2.0 CentOS 6.2
2. This refers to the reverse proxy https refers to the Nginx SSL server, Nginx and back-end server communication or HTTP, of course, can also be implemented Nginx and back-end server to implement HTTPS communication, but this article does not test

Steps:
Nginx to implement SSL, at compile time to add--with-http_ssl_module, such as:
./configure--with-http_ssl_module

#cd/usr/local/nginx/conf
#mkdir SSL
#cd SSL
Generate a private key
# OpenSSL Genrsa-des3-out Aoshiwei.com.key 1024
Prompt to enter a password
Generate a CSR (Certificate Signing Request) file:
# OpenSSL Req-new-key aoshiwei.com.key-out AOSHIWEI.COM.CSR
Fill in the certificate content, organization, domain name, etc., Common name fill in the domain name

# CP Aoshiwei.com.key Aoshiwei.com.key.bak
# OpenSSL rsa-in aoshiwei.com.key.bak-out Aoshiwei.com.key
# OpenSSL x509-req-days 365-in aoshiwei.com.csr-signkey aoshiwei.com.key-out aoshiwei.com.crt

Add in nginx.conf:

[Plain]View Plaincopy

2. server {
4. # # Server port and name # # # #
6. Listen 443 SSL;
8. server_name member.aoshiwei.com;
10. SSL on;
14. # # # SSL log Files # # #
16. Access_log Logs/ssl-access.log;
18. Error_log Logs/ssl-error.log;
22. # # # SSL cert Files # # #
24. Ssl_certificate SSL/AOSHIWEI.COM.CRT;
26. Ssl_certificate_key Ssl/aoshiwei.com.key;
28. # # # ADD SSL specific settings here # # #
30. Keepalive_timeout 60;
34. # # # limiting ciphers ########################
36. # Uncomment as per your setup
38. #ssl_ciphers high:! ADH;
40. #ssl_perfer_server_ciphers on;
42. #ssl_protocols SSLv3;
44. ##############################################
46. # # We want full access to SSL via backend # # #
48. Location/{
50. Proxy_pass http://member.aoshiwei.com;
52. # # Force Timeouts if one of the backend is died # #
54. Proxy_next_upstream Error timeout Invalid_header http_500 http_502 http_503;
58. # # # Set Headers # #
60. Proxy_set_header Host $host;
62. Proxy_set_header X-real-ip $remote _addr;
64. Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
68. # # Most PHP, Python, Rails, Java apps can use the This header # # #
70. Proxy_set_header X-forwarded-proto HTTPS;
74. # # By default we don ' t want to redirect it # # # #
76. Proxy_redirect off;
78. }
80. }

Nginx Proxy HTTPS