Province Name (full name) []:taoLocality Name (eg, city) [Default City]:xieOrganization Name (eg, company) [Default Company Ltd]:linOrganizational Unit Name (eg, section) []:apaCommon Name (eg, your name or your server‘s hostname) []:dfdEmail Address []:adming Please enter the following ‘extra‘ attributesto be sent with your certificate requestA challenge password []:szyino-123An optional company name []:fdafNote: Because it is issued to its own certificate, so the information can be filled in
-load-balancers--load-balancer-name You_elb_name | JQ '. Loadbalancerdescriptions[]. Backendserverdescriptions '
[
{
policynames]: [
"Enableproxyprotocol"
],
"Instanceport" : "
policynames": [
"Enableproxyprotocol"
],
"Instanceport": Bayi
},
{
"Policynames": [
"Enableproxyprotocol"
],
"Instanceport": 443
}
]
If you want to disable the proxy protocol, you can do so, and the 4th step is to see if it is disabled.
# A
commente D out to leave a V1 CRLCRL = $dir/crl.pem # The current CRLPrivate_key = $dir/private/cakey.pem# the private keyRandfile = $dir/private/.rand # private random number file[Req_distinguished_name]CountryName = Country Name (2 letter code)Countryname_default = CNCountryname_min = 2Countryname_max = 2Stateorprovincename = State or province name (full name)Stateorprovincename_default = FJLocalityname = locality Name (eg, city)Localityname_default = FZ0.organizationName = Organization Name (
--with-mysqli=/usr/local/mysql/bin/mysql_configmake make installNote: If it is a 64-bit system, the "Cannot find OpenSSL libraries" may appear, the solution is to do a soft link: ln-s/usr/lib64/libssl.so/usr/lib/Post-install copy php.ini-production to/ect/php.iniConfiguration file for PHP-FPMCp/usr/local/php/etc/php-fpm.conf.default /usr/local/php/etc/php-fpm.confModify the FPM Master profile to change the running users and groups to WWW, removing the preceding;Vi/usr/local/php/etc/php-fpm.co
, encrypted with the negotiated encryption algorithm to ensure that the data is intact and not tampered with;
Generate an SSL key pairThe normal website HTTPS use SSL certificate is need to purchase, we do the experiment just need to generate one on the line, but not on the network to circulate;Download OpenSSL build Softwareyum install -y opensslEnter the key pair directorySet secret key to pre
= $dir/crl.pem # the Current CRL Private_key = $dir/private/cakey.pem# the private key randfile = $dir/private/.rand # private Random Numbe R file [req_distinguished_name] countryname = Country name (2 letter code) Countryname_default = CN Countrynam E_min = 2 Countryname_max = 2 Stateorprovincename = State or province name (full Name) stateorprovincename_d Efault = FJ LocaLityname = locality name (eg, city) Localityname_default = FZ 0.organizationName = Organization name (eg, compa NY) 0.organ
Gitlab is an Open-source project management program developed with Ruby on rails. Access to public or private projects through the Web interface. It has a similar function with GitHub to explore source code, manage defects, and annotate.
This article chooses Nginx and MySQL to cooperate with Gitlab to realize the function of Web management, data storage and so on, the difficulty of configuration is basically in Gitlab script modification, SSH
This article chooses Nginx and MySQL to cooperate with Gitlab to realize the function of Web management, data storage and so on, the difficulty of configuration is basically in Gitlab script modification, SSH secret key connection, Nginx SSL certificate and so on, the author also consumes very big strength, Combined with a lot of documents clue and many foreigner
Official reference documentation, including the SSL configuration for Apache, Nginx, and IIS:http://www.wosign.com/Docdownload/Instance one, configure HTTP to forward to HTTPS, a virtual host has two servers, some content use * * insteadNGX01 (10.66.**.**), Ngx02 (10.66.**.**)1, add the Sslkey folder in/etc/nginx, import the
Environment Introduction
1.nginx Server: 10.10.54.157
2. Configure the Nginx server, and when you hear from the client www.zijian.com:80 request, go to 10.10.54.150:1500 on this Web server
3. Configure Nginx server to support SSL encrypted transport protocol
Generate the required certificate file for
This article mainly introduces the Nginx SSL fast Two-way authentication configuration (script), has a certain reference value, now share to everyone, the need for friends can refer to
Currently encountering a project has security requirements that require only individual users to have access. In accordance with the configuration can be solved by no code to solve the principle of the
Nginx is a high-performance HTTP server, but also an efficient reverse proxy server. Unlike traditional servers, Nginx is an event-based asynchronous architecture with little memory footprint but good performance. If your Web application is based on Node.js, it is recommended that you consider using Nginx as a reverse proxy, because
. One-way server Verification
Create and enter the sslkey storage directory
# Mkdir/opt/nginx/sslkey
# Cd/opt/nginx/sslkey
① Generate an RSA key:
# OpenSSL genrsa-out key. pem 2048
② Generate a certificate request
# OpenSSL req-New-Key key. pem-out cert. CSR
# // The system will prompt you to enter the province, city, domain name information, etc. What's important is that email must be your domain name suff
+FOLWDTVXDDJD9DPR2X1NC Y5HNOP4K6KVRXDJQ4OTDUQQ4P+SZU4HB41GIQEZ4----- END Certifi
CATEREQUEST-----
This CSR file is what you need to submit to the SSL certification authority, and when your domain name or organization is verified, the certification authority will issue you a
example_com.crt
and
Example_com.key need to use in the Nginx configura
How to configure multiple SSL certificates for a single Nginx IP addressBy default, an Nginx IP address only supports one SSL certificate. You need multiple IP addresses to configure multiple SSL certificates. If the public IP address is limited, you can use the TLS Server N
. Free, 2. Although there is a validity period of 3 months, it can be automatically updated through scripts. 3. You do not have to register any account on the website of the other party. All the processes are done on the local machine.2. Environment
1. This article uses centos 7.2.1511 and kernel version 3.10.0;2. nginx has been installed. The version is nginx version:
Centos7+nginx issuing and configuring SSL services through Windows CARecently in the knowledge of Linux, as a necessary knowledge of operations engineer, a Web service especially run on the Internet is very easy to attack, so in order to ensure the minimum security needs to configure the Web service SSL, this can improve the security, so we introduce today, CENTO
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.