Nginx配置Https

標籤：bundle   sha   連接埠配置   listen   src   cat   分享   ges   9.png   

1.申請認證：

https://console.qcloud.com/ssl?utm_source=yingyongbao&utm_medium=ssl&utm_campaign=qcloud

 

2.將認證匯入伺服器，xftp或者FileZilla都可以:

3.修改Nginx，我的Nginx位於/etc/nginx/ :

 

 

Nginx內建ssl配置，刪掉注釋，修改認證位置就好了。

 

80連接埠配置：

server {        listen       80 default_server;        listen       [::]:80 default_server;        server_name  _;        #root         /usr/share/nginx/html;
　　　　 #注意添加下面這行代碼，用於重新導向        rewrite ^(.*) https://$server_name$1 permanent;        # Load configuration files for the default server block.        include /etc/nginx/default.d/*.conf;        location / {        }        error_page 404 /404.html;            location = /40x.html {        }        error_page 500 502 503 504 /50x.html;            location = /50x.html {        }   }

443連接埠設定:

server {        listen       443 ssl http2 default_server;        listen       [::]:443 ssl http2 default_server;        server_name  _;        root         /usr/share/nginx/html;#        ssl_certificate "/etc/pki/nginx/server.crt";#        ssl_certificate_key "/etc/pki/nginx/private/server.key";        ssl_certificate /etc/nginx/conf.d/1_www.bincoding.cn_bundle.crt;        ssl_certificate_key /etc/nginx/conf.d/2_www.bincoding.cn.key;        ssl_session_cache shared:SSL:1m;        ssl_session_timeout  10m;        ssl_ciphers HIGH:!aNULL:!MD5;        ssl_prefer_server_ciphers on;        # Load configuration files for the default server block.        include /etc/nginx/default.d/*.conf;        location / {        }        error_page 404 /404.html;            location = /40x.html {        }        error_page 500 502 503 504 /50x.html;            location = /50x.html {        }    }

 

最後記得重啟Nginx :  service nginx restart

 

參考： 

nginx配置https   https://www.v2ex.com/t/309382

常用伺服器配置    https://mozilla.github.io/server-side-tls/ssl-config-generator/

Nginx配置Https