discuz更新https证书

爱被打了一巴掌 2021-12-03 11:59 230阅读 0赞

上篇说到了需要迁移下服务器，

看了下 https 证书也快过期了，

就顺便也一起更新了一下。

*  先去 [https://freessl.cn][https_freessl.cn] 申请了一张免费证书：操作一波、证书下来后，将证书上传到服务器上。
 *  然后调整服务相关配置代码

server
        {
            listen 80;
            server_name  798wd.com www.798wd.com;
            rewrite ^(.*)$  https://$host$1   permanent;
        }
    
    server
        {
            listen 443;
            server_name  798wd.com www.798wd.com;
            ssl_certificate /data/ssl/wd798.www.com/full_chain.pem;
            ssl_certificate_key /data/ssl/wd798.www.com/private.key;
    
            root  /data/web/upload;
            index index.html index.htm index.php default.html default.php;
            include /data/conf/rewrite/wd798/798wd.com.rewrite;
    
            ssl_session_timeout 5m;
            ssl_prefer_server_ciphers on;
            ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    
    
            access_log  /data/wwwlogs/wd798-com-access.log main;
            error_log /data/wwwlogs/wd798-com-error.log;
    
      
            error_page 403  400 404 /404.html;
            location = /404.html {
                #放错误页面的目录路径。
                root /data/web;
            }
    
            # Deny access to PHP files in specific directory
            #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    
            include enable-php.conf;
    
            location /nginx_status
            {
                stub_status on;
                access_log   off;
            }
    
    
            location = /favicon.ico {
                log_not_found off; access_log off;
            }
    
            location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
            {
                expires      30d;
            }
    
            location ~ .*\.(js|css)?$
            {
                expires      12h;
            }
    
            location ~ /.well-known {
                allow all;
            }
    
            location ~ /\.
            {
                deny all;
            }
    
        }

*  nginx -t 检查是否存在配置错误
 *  nginx -s reload 重启服务

本文为阿远原创文章,转载无需和我联系,但请注明来自阿远博客 [https://www.xianhenyuan.com][https_www.xianhenyuan.com]

[https_freessl.cn]: https://freessl.cn
[https_www.xianhenyuan.com]: https://www.xianhenyuan.com