Use SSL Certificate for connection in HAProxy
I. Environment Introduction
I was notified that the website should be changed from http to https. The current front-end architecture of my website is shown in:
Suppose we have two physical machines with many tomcat containers on each physical machine. The front end uses the http layer Load Balancing conducted by haproxy, And then we use LVS load balancing on th
our new website, we must first introduce and establish a security certificate for SSL binding.
In IIS 7.0, you can manage certificates by clicking root machine node in the left-hand tree view Manager ), then select the "server certificate" pattern in the feature window on the right:
This will list all certificates r
certificate file Ssl.crt, resulting, Save as PFXARCHIVE.P12.4. Deploy the certificate on the computer that corresponds to the domain name, for example, IIS. The operation process is very simple, in the IIS root node of the server certificate function, right-click, import, according to the wizard to enter the Pfxarchiv
website is encrypted, and the certificate authority has confirmed that the website is owned or operated by an enterprise, the Enterprise is legally organized according to the permissions displayed on the certificate and security status bar. The Certificate Authority has not made any statement on the commercial conduct of the website.
If you try to use both
unsafe content.
If a page needs to be accessed through HTTPS, all of the elements must be HTTPS, if there are: Pictures, JS script, Flash plug-ins are called through HTTP, it will appear this error, the most common is the call Flash playback plug-ins: codebase = ' http://download.macromedia.com/pub/shockwave/Cabs/flash/swflash.cab ', change HTTP to HTTPS, and test the SSL problem after refreshing. issue:
; ssl_certificate /etc/nginx/ssl/www.test.com.crt; ssl_certificate_key /etc/nginx/ssl/www.test.com.key;}If all goes well, open the browser and you can access the website via HTTPS. A warning appears on the first visit (because our self-signed certificate is not trusted by the browser), the certificate is impo
I did not use the self-issued SSL certificate here, because it is not trusted by the browser, of course, did not purchase: D. The StartSSL free certificate is used and is valid for one year. As for the certificate application, it is not detailed here, as long as it reaches StartSSL. you can apply to register a user at
all casual. The last file used is the key and the CRT file.If you need to use PFX, you can use the following command to generateOpenSSL pkcs12-export-inkey ssl.key-in ssl.crt-out ssl.pfxAdd the following configuration to the server node of the Nginx configuration file that requires the use of the certificate.SSL on;SSL_CERTIFICATE/HOME/SSL.CRT;Ssl_certificate_key/home/ssl.key;Ssl_session_timeout 5m;Ssl_protocols SSLv2 SSLv3 TLSv1;Ssl_ciphers all:! Ad
command:
Cat 53f58e3ac2172cd5.crt gd_bundle-g2-g1.crt > DOMAIN.CRT
Please change the file name according to the actual situation.
The certificate merge completes, Next opens nginx the configuration file, the author here Certificate directory is located in "/root/crt"
Server{Listen 443;#listen [::]:80;server_name domain;Index index.html index.htm index.php default.html default.htm default.php;Root/home/
Request a free HTTPS certificate https://login.wosign.com/reg.html
First check if Nginx has installed Http_ssl_module, I this is installed HTTPS module, if not this module requires Nginx smooth upgrade to add SSL to implement the station HTTPS.
can refer to http://www.open-open.com/lib/view/open1451624143370.html
Successful application will let you retrieve the certifi
redirectoff;} error_page500502503504/50/50.html; NBSP;NBSP;NBSP;NBSP;NBSP;LOCATIONNBSP;~NBSP;/50 (/.*) { roothtml;}}}The most critical of these are the two configurations of Ssl_certificate and Ssl_certificate_key, while others are configured as normal. But one more proxy_set_header x-forwarded-proto https; Configuration.Tomcat-side configuration Server.xmlmust haveproxyport= "443", this is the key to the whole article, of course redirectport must also be 443. Alsothe configuration of the nodes
This article mainly introduces what is Node. js? What are the advantages of Node. js ?, To try to explain what Node is. js, this article will briefly introduce some background information: the problem to be solved, how it works, h
Model Stepping 7, Genuineintel * vs120comntools= ' C:\Program Files (x86) \microsoft Visual Studio 12.0\VC ' * Input files:c:\devpack\mingw\msys\1.0\local\win64\bin *: Libeay32.dll *: SSLEAY32.DL L * Output path:c:\devpack\workspace\temp\win64--------------------------------------------------* Make Windows Module Definition:libeay32.def * Make Windows Module import file:libeay32.libMicrosoft (R) Library Manager Version 12.00 .21005.1Copyright (C) Microsoft Corporation. All rights reserved. C
Time: 2003-07-22Author: Zhou YiNumber of Views: 4214This article keyword: "Tuxedo services", "Web services"
Article Toolsrecommend to a friend Print Article
Configure node Manger and SSL for WebLogic Server 8.1
Note: This article is only valid for WebLogic Server 8.1 because the settings for the WebLogic Server7
Time: 2003-07-22Author: Zhou YiNumber of Views: 4214This article keyword: "Tuxedo services", "Web services"
Article Toolsrecommend to a friend Print Article
Configure node Manger and SSL for WebLogic Server 8.1
Note: This article is only valid for WebLogic Server 8.1 because the settings for the WebLogic Server7
How to handle. pfx suffix files in Node. js, node. js. pfx
Preface
In nodejs, various third-party Encryption Files will be obtained during encryption and decryption, and their suffixes will be the same ,. key /. pem /. pfx and so on. Can it be customized? It is a file.
However, today I have read a lot of nodejs librari
This article mainly introduces Node. js package details, Node. A js package is a directory that contains the package in JSON format. json, Node. the js package basically follows the CommonJS specification. For more information, se
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.