Because the SSL certificate expires, so want to re-get one, here see Wosign digital certificate and then tried. It's like it's really possible. But to register an account to have a one-year term certificate, but also good.
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6E/94/wKiom1V_91fTZp2LAAO2i0Lq-qQ293.jpg "title=" QQ picture 20150616181527.png "alt=" Wkiom1v_91ftzp2laao2i0lq-qq293.jpg "/>
Here choose the way two, submit yourself, otherwise there is no. key file, will make a special tangle. Of course, it may be that I do not understand the certificate of this piece. Because the time is ready to download to you only CRT files. At the moment I don't know how to produce a key file or Pem file from the CRT
Now that you're submitting your own CSR, you need to build one with OpenSSL.
Generate server private key first OpenSSL genrsa-des3-out Servername.key 2048 create a Certificate signing request (Certificate Signing request (CSR)) OpenSSL Req-new-key serv Er.key-out SERVER.CSR When you start Nginx with SSL, you must enter the key CP Server.key Servername.key.orgopenssl rsa-in servername.key.org-out Servername.key
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/6E/94/wKiom1V_--rgCcQqAAG-a8EyztI926.jpg "title=" QQ picture 20150616183508.png "alt=" Wkiom1v_--rgccqqaag-a8eyzti926.jpg "/>
This could take 2-3 hours, or maybe one day.
There are 2 CRT files after download.
Use one of these configurations to the nginx inside
server { listen 80; server_name www.xxx.com; #实现http到https的跳转规则 if ($host ~* www.xxx.com) { rewrite ^/$ https://www.xxx.com/ permanent; } index index.html index.php index.htm; root /home/www/html; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location /\. { deny all; } location / { if (-f $request _filename) { expires 30d; break; } if (!-e $request _filename) { rewrite ^ (. +) $ /index.php last; } } location ~ .*\.php$ { root /home/www/html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document _root$fastcgi_script_name; include fastcgi_params; } server{ server_name www.xxx.com; listen 443; root /home/www/html; index index.html index.htm index.php; ssl on; ssl_certificate /usr/local/nginx/conf/www.crt; ssl_certifiCate_key /usr/local/nginx/www.key; location /\. { deny all; } location / { if (-f $ Request_filename) { expires 30d; break; } if (!-e $request _filename) { rewrite ^ (. +) $ /index.php last; } } location ~ .*\.php$ { root /home/www/html; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param HTTPS $fastcgi _https; fastcgi_param SCRIPT_FILENAME $document _ root$fastcgi_script_name; include fastcgi_params; } }
This is done!
This article is from the "tireless learning ..." Blog, be sure to keep this source http://jonyisme.blog.51cto.com/3690784/1662453
Free SSL certificate download and Nginx installation