Nginx Configure a free SSL certificate to support HTTPS security access

Free SSL Certificate Request

Apply for a free SSL certificate to http://www.wosign.com/Products/free_SSL.htm.

Download www.iamle.com.zip files, extract files, find for Nginx.zip decompression, get 2 files

1_WWW.IAMLE.COM_BUNDLE.CRT, 2_www.iamle.com.key

Change the name Www.iamle.com.crt,www.iamle.com.key upload to the server standby

Nginx Configure SSL Certificate deployment HTTPS support

Find the corresponding server

Increase

Listen 443 SSL;
SSL on;
SSL_CERTIFICATE/USR/LOCAL/NGINX/CONF/SSL/WWW.IAMLE.COM.CRT;
Ssl_certificate_key/usr/local/nginx/conf/ssl/www.iamle.com.key;
Ssl_session_timeout 5m;
Ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
Ssl_ciphers all:! Adh:! Export56:rc4+rsa:+high:+medium:+low:+sslv2:+exp;
Ssl_prefer_server_ciphers on;

Reload Nginx Configuration

[Root@do ssl]#/etc/init.d/nginx Reload

Browser-trusted https://www.iamle.com already available ~

Add

Convert PFX to Nginx required Crt,key

If you already have a certificate with a PFX extension, you need to convert the

[root@do ~]# OpenSSL pkcs12-in www.iamle.com.pfx-nocerts-nodes-out www.iamle.com.key
Enter import Password: Enter certificate password
MAC verified OK

[root@do ~]# OpenSSL pkcs12-in www.iamle.com.pfx-clcerts-nokeys-out www.iamle.com.crt
Enter import Password: Enter certificate password
MAC verified OK

Generate 2 File Www.iamle.com.key, www.iamle.com.pfx copy to the directory you specified