https 获取安全证书和配置nginx

小咪咪 2022-01-26 15:39 241阅读 0赞

1.阿里云申请免费的安全证书，一般几个小时就ok

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70][]

2.服务器nginx创建目录cert

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70 1][]

3.将下载下来的压缩包打开，复制里面的文件到服务器nginx配置cert目录下，可以更改名字

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70 2][]

4.修改nginx.conf配置文件

server \{  
    listen 443;  
    server\_name xxx.cn; \#服务器域名  
    ssl on;  
    ssl\_certificate  cert/xxx.pem;证书  
    ssl\_certificate\_key cert/xxx.key;证书  
    ssl\_session\_timeout 5m;  
    ssl\_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  
    ssl\_protocols TLSv1 TLSv1.1 TLSv1.2;  
    ssl\_prefer\_server\_ciphers on;  
    location / \{  
         proxy\_pass   http://localhost:8092;\#代理服务路径  
    \}  
\}

\#监听80端口重定向到xxx.cn:443 服务  
server \{  
    listen 80;  
    server\_name xxx.cn;  
    rewrite ^(.\*)$ https://xxx.cn:443$1 permanent;  
\}

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70]: /images/20220126/47e1b8d93ac049f59bbef0098e91fa5b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70 1]: /images/20220126/7286c7ed9e614a4ab8c6e7cb407e1399.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMyNzg0MzAz_size_16_color_FFFFFF_t_70 2]: /images/20220126/db5fedd0579d4894b9239ab07c8e7b22.png