SSL certificate configuration for Nginx1. Use OpenSSL to realize Certificate centerbecause you are using OpenSSL to set up a private certificate center, make sure that the following fields are the same in Certificate Center certificates, server side certificates, client cert
-spiceworksRobiii:configure your Windows Remote Desktop (RDP) to the use of TLS with a STARTSSL certificateRds:rd Gateway must is configured to use an SSL certificate signed by a trusted certification authority | Microsoft DocsImplementing an OCSP Responder:part i–introducing OCSP | Ask the Directory Services TeamOpenssl:how to setup a OCSP server for checking third-party certificates? -Server FaultWindows
is ' changeit .
Follow the prompts to determine the details of the certificate. This information is used to construct the distinguished Name (DN) in the X.500 entity.
First and last name: This is not your name, this is Common name (CN), for example ' confluence.example.com '. The CN must correspond exactly to the domain name used by confluence, otherwise Tomcat will not be able to use the ce
Official reference documentation, including the SSL configuration for Apache, Nginx, and IIS:http://www.wosign.com/Docdownload/Instance one, configure HTTP to forward to HTTPS, a virtual host has two servers, some content use * * insteadNGX01 (10.66.**.**), Ngx02 (10.66.**.**)1, add the Sslkey folder in/etc/nginx, import the SSL certificate to the folder, refer t
some documents here. I use a ca. Sh provided by OpenSSL to sign the certificate, rather than sign. Sh in mod_ssl.
Using the OpenSSL syntax to generate a certificate has many restrictions, such as the Directory and key location. It is troublesome. I tried it for several days and finally gave up. If you are interested, refer to the OpenSSL manual.
Step 1: Inst
SSL is a commonly used WEB Service encryption channel. Its full name is Secure Socket Layer, which is also known as the Secure sockets interface. It uses digital certificates to ensure its security mechanism. The main function is encryption and authentication to protect the security of network transmission. It is in the middle of the HTTP and TCP layers.
SSL encryption and authentication use public keys and
The following is a Java certificate: HTTPS and SSL application notes test. I hope this article will help you.
When a connection is obtained, like a normal browser, the server certificate is still verified to be trusted (issued by an authority or signed by an authority). If the server certificate is untrusted, the defau
Sslcertificatekeyfile/usr/local/apache/conf/2_laojiang.me.key
Sslcertificatechainfile/usr/local/apache/conf/ca.crt
Note that we have processed SSL several file formats that need to be uploaded to the corresponding directory.
2, Nginx website environment
A-Save the domain name www.laojiang.me certificate file 1_www.laojiang.me_cert.crt, private key file
learn how to set up such a user account by following steps 1-4 in our initial server setup for Ubuntu 14.04.After this, you'll also need to the Nginx Web server installed. If you would a entire LEMP (Linux, Nginx, MySQL, PHP) stack on your server, you can follow we guide on s Etting up LEMP on Ubuntu 14.04.If you just want the Nginx Web server, you can instead just type:sudo apt-get updatesudo apt-get install nginxStep One-create the SSL CertificateW
, which contains the following two steps:
(1) Prepare the security certificate.
(2) Configure the Tomcat's SSL connector (Connector). First, the preparation of security certificates
There are two ways to get a security certificate: one way to buy from an authority, and one way to create self-signed certificates. Here is the second way to get the
.
Select the SQL. Cer file at the export location.
After confirming that all the information is correct, you can click Next to confirm the installation of SSL.
After the installation is complete by default, SSL does not start the encrypted channel that we need to add to our site SSL, and we are sure that the HTTP
A complete SSL certificate is divided into four parts:
CA root certificate (Root CA)
Intermediate certificate (Intermediate Certificate)
Domain name Certificate
Certificat
Install let ' s Encrypt client
For CentOS distributions There are currently two ways to install let's Encrypt clients, one of which is a direct yum installation from the upstream Epel source, one that is downloaded from the Encrypt source of let ' s GitHub. Waterscape One page uses the following second method, downloaded from the GitHub.
Two ways of installingSimple comparison:
YUM installation follows the system update to update the installation package, but there is no Apache automatic inst
($ server_port = 80 ){Return 301 https: // $ server_name $ request_uri;}If ($ scheme = http ){Return 301 https: // $ server_name $ request_uri;}Error_page 497 https: // $ server_name $ request_uri;In the end, the ssl certificate itself does not have much money and is free of charge. If I am a new station, I will not hesitate to configure the ssl
-Sky exchange-sp "Microsoft RSA SChannel Cryptographic Provider"-sy 12
Command Line Switch
-R
Create a self-signed certificate. Self-signed certificates refer to those that are not signed by the certificate authority. Because it is not signed by a certificate authority, it can be used for the encryption required by SSL
of this tutorial, install the software purpose in order to learn Perl).: http://www.activestate.com/activeperl/downloads/(Download and install according to System selection Win32 or Win64 version).3. Configure Environment variablesAdding environment variables to environment variablesVariable name: Openssl_home variable value: C:\wnmp\OpenSSL-Win64\bin; (The variable value is the OpenSSL installation location)Add the following at the end of the path v
; ssl_certificate /etc/nginx/ssl/www.test.com.crt; ssl_certificate_key /etc/nginx/ssl/www.test.com.key;}If all goes well, open the browser and you can access the website via HTTPS. A warning appears on the first visit (because our self-signed certificate is not trusted by the browser), the certificate is impo
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.