nginx配置https域名

李欢庆 發表於 2020-1-21 14:08:00

nginx安装配置支持https和配置https域名
<div class="cnblogs_code"><img id="code_img_closed_2636a4eb-c14e-4a17-9cc5-acdacc42b6b0" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_2636a4eb-c14e-4a17-9cc5-acdacc42b6b0" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_2636a4eb-c14e-4a17-9cc5-acdacc42b6b0" class="cnblogs_code_hide">
<pre>1 yum install -y gcc-c++ pcre pcre-devel zlib zlib-devel openssl openssl-devel</pre>
</div>
1、安装依赖</div>
<div class="cnblogs_code"><img id="code_img_closed_17179df6-f71a-4d86-82fd-ef0f6c99f68a" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_17179df6-f71a-4d86-82fd-ef0f6c99f68a" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_17179df6-f71a-4d86-82fd-ef0f6c99f68a" class="cnblogs_code_hide">
<pre>1 wget http://nginx.org/download/nginx-1.10.2.tar.gz
2 tar -zxvfnginx-1.10.2.tar.gz
3 cd nginx-1.10.2/</pre>
</div>
2、下载nginx</div>
3、配置nginx
　　
<div class="cnblogs_code">
<pre>./configure</pre>
</div>
<div class="cnblogs_code"><img id="code_img_closed_11f75628-3705-49f6-a9f6-4be6f01d9f21" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_11f75628-3705-49f6-a9f6-4be6f01d9f21" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_11f75628-3705-49f6-a9f6-4be6f01d9f21" class="cnblogs_code_hide">
<pre> 1 ./configure \
 2 --prefix=/usr/local/nginx \
 3 --conf-path=/usr/local/nginx/conf/nginx.conf \
 4 --pid-path=/usr/local/nginx/conf/nginx.pid \
 5 --lock-path=/var/lock/nginx.lock \
 6 --error-log-path=/var/log/nginx/error.log \
 7 --http-log-path=/var/log/nginx/access.log \
 8 --with-http_gzip_static_module \
 9 --http-client-body-temp-path=/var/temp/nginx/client \
10 --http-proxy-temp-path=/var/temp/nginx/proxy \
11 --http-fastcgi-temp-path=/var/temp/nginx/fastcgi \
12 --http-uwsgi-temp-path=/var/temp/nginx/uwsgi \
13 --http-scgi-temp-path=/var/temp/nginx/scgi</pre>
</div>
3.2、自定义配置</div>
<div class="cnblogs_code"><img id="code_img_closed_adf7fc05-97c6-46f9-8df0-6f2fe2701ff1" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_adf7fc05-97c6-46f9-8df0-6f2fe2701ff1" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_adf7fc05-97c6-46f9-8df0-6f2fe2701ff1" class="cnblogs_code_hide">
<pre>1 ./configure --prefix=/usr/local/nginx --with-http_ssl_module</pre>
</div>
3.3、支持HTTPS</div>
<div class="cnblogs_code">
<pre>make</pre>
</div>
<div class="cnblogs_code"><img id="code_img_closed_01b79e0a-55c7-43a2-8ed8-506bb0971d68" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_01b79e0a-55c7-43a2-8ed8-506bb0971d68" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_01b79e0a-55c7-43a2-8ed8-506bb0971d68" class="cnblogs_code_hide">
<pre>1 /usr/local/nginx/sbin/nginx -V</pre>
</div>
查看nginx是否支持</div>
<div class="cnblogs_code"><img id="code_img_closed_40014478-085e-476d-a560-1e3678aea20a" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_40014478-085e-476d-a560-1e3678aea20a" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_40014478-085e-476d-a560-1e3678aea20a" class="cnblogs_code_hide">
<pre>1 ./configure --with-http_ssl_module
2 make</pre>
</div>
如果没支持才编译一下</div>
<div class="cnblogs_code"><img id="code_img_closed_ce5a8d92-ae3c-4363-ba39-ba9b3b80ca39" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_ce5a8d92-ae3c-4363-ba39-ba9b3b80ca39" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_ce5a8d92-ae3c-4363-ba39-ba9b3b80ca39" class="cnblogs_code_hide">
<pre> 1 # 以下属性中以ssl开头的属性代表与证书配置有关，其他属性请根据自己的需要进行配置。
 2 server {
 3 listen 443 ssl; #SSL协议访问端口号为443。此处如未添加ssl，可能会造成Nginx无法启动。
 4 server_name localhost;#将localhost修改为您证书绑定的域名，例如：www.example.com。
 5 root html;
 6 index index.html index.htm;
 7 ssl_certificate cert/domain name.pem; #将domain name.pem替换成您证书的文件名。
 8 ssl_certificate_key cert/domain name.key; #将domain name.key替换成您证书的密钥文件名。
 9 ssl_session_timeout 5m;
10 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;#使用此加密套件。
11 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #使用该协议进行配置。
12 ssl_prefer_server_ciphers on;
13 location / {
14 root html; #站点目录。
15 index index.html index.htm;
16 }
17 }</pre>
</div>
按照下文中注释内容修改nginx.conf文件：</div>
<div class="cnblogs_code"><img id="code_img_closed_f67d702e-3bb7-4ba9-82ef-8e7bc9ee98da" class="code_img_closed lazyload" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ContractedBlock.gif"><img id="code_img_opened_f67d702e-3bb7-4ba9-82ef-8e7bc9ee98da" class="code_img_opened lazyload" style="display: none" alt="" data-src="http://images.cnblogs.com/OutliningIndicators/ExpandedBlockStart.gif">
<div id="cnblogs_code_open_f67d702e-3bb7-4ba9-82ef-8e7bc9ee98da" class="cnblogs_code_hide">
<pre>1 server {
2 listen 80;
3 server_name localhost; #将localhost修改为您证书绑定的域名，例如：www.example.com。
4 rewrite ^(.*)$ https://$host$1 permanent; #将所有http请求通过rewrite重定向到https。
5 location / {
6 index index.html index.htm;
7 }
8 }</pre>
</div>
可选：设置HTTP请求自动跳转HTTPS。</div>
本博文参考https://blog.csdn.net/long690276759/article/details/82790002和阿里云官方文档https://yundunnext.console.aliyun.com/?spm=5176.12818093.network-security.dbuy.488716d0rd77Sk&p=cas#/overview/cn-hangzhou 来写出 
来源：https://www.cnblogs.com/guanzhuang/p/12221543.html

頁: [1]

琼殿技术论坛's Archiver

nginx配置https域名