Copy Code code as follows:
server {
Listen 80;
Listen [::]:80 Ipv6only=on;
server_name example.com;
return to Https://example.com$request_uri;
}
Four, reliable Third-party SSL issuing agency
As we all know, some NIC agencies have burst into a scandal over the issuance of certificates for Google domain names, so it is important to select a reliable Third-party SSL issuer.
At present, the general market for small and medium-sized owners and enterprises of the
-party SSL issuing authority
As we all know, a NIC agency has had a scandal about issuing a certificate for Google domain names, so it's important to choose a reliable third-party SSL issuing agency.
At present, the general market for small and medium-sized webmaster and Enterprise SSL certification authorities are:
Startssl
Comodo/Sub-brand Positive SSL
GlobalSign/Sub-brand Alph
:
Startssl
Comodo/Sub-brand Positive SSL
GlobalSign/Sub Brand Alphassl
GeoTrust/Sub Brand RapidSSL
Which Postivie SSL, Alphassl, RAPIDSSL, etc. are sub brands, are generally three level four certificate, so you will need to increase the CA certificate chain to your CRT file.
Take Comodo Positive SSL For example, you need to concatenate CA certificates, assuming your domain name is example.com
So, the
tell your browser this website full station encryption, and forced to use HTTPS access Add_header strict-transport-security max-age=63072000; Add_header X-frame-Options DENY; Add_header X-content-type-options Nosniff;At the same time can also open a single Nginx configuration, HTTP access requests are used 301 to jump to HTTPS server { a; Listen [::]:SSL ipv6only= on; server_name example.com; return 301 https://Example.com$request_uri;}Iv. reliab
your own CSR (Certificate Signing request), here is the CSR online generation tool. Reference URL: https://www.csr.sh/Five,CloudflareOfficial website: https://www.cloudflare.com/Reviews: Cloudflare early on to provide free SSL certificates, provided that your domain name to be placed in the Cloudflare resolution, registered as the release Plan.Note: As long as the domain name joins Cloudflare free Plan, when parsing a record, click traffic to this hostname will go through Cloudflare. In general
as:Teddysun_com.pemTeddysun_com.csr
2. Application Certificate
There should already be 5 kinds of free SSL (DV) providers on the market, respectively:1) letsencrypt (Https://github.com/certbot/certbot)2) Startssl (https://www.startssl.com/)3) wosign (https://buy.wosign.com/free/)4) Comodo5) AlphasslThe first 3 are easier to apply, and the latter 2 are available for free.
Pay is a variety of, and here is no longer to repeat.
The application process is omitted.
Finally you will get a certifi
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.