WordPress系列教程(六)----域名开启https连接

ゝ一纸荒年。 2022-05-10 00:52 193阅读 0赞

# 一、前言 #

现在基本上网站都会使用https进行访问，建立一个信息安全通道，来保证数据传输的安全。

# 二、域名配置 #

在域名信息页中点击免费开启SSL证书功能

![70][]

![70 1][]

开启之后，在阿里云中找到云盾

![70 2][]

找到证书一栏

![70 3][]

找到相应的容器进行下载

![70 4][]

# 三、配置证书 #

首先在Nginx目录下创建cert/文件夹，比如我这里就是/usr/local/nginx/cert目录，将压缩包中的两个文件上传到该目录下，修改nginx.conf配置文件为如下所示：

user  www www;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    	
        sendfile        on;
        keepalive_timeout  65;
    
    	#
        # HTTPS server
        #
        server {
    	
            listen 443 ssl;
            server_name  localhost;
    		root /xxx/xxx/xxx/xxx;
            ssl_certificate      ../cert/1538361029435.pem;
            ssl_certificate_key  ../cert/1538361029435.key;
    
    		ssl_stapling on;
    		ssl_stapling_verify on;
    			
    		error_page  404              /404.html;
    		
    		location / {
    			if (-f $request_filename/index.html){
    				rewrite (.*) $1/index.html break;
    			}
    			if (-f $request_filename/index.php){
    				rewrite (.*) $1/index.php;
    			}	
    			if (!-f $request_filename){
    				rewrite (.*) /index.php;
    			}
    		}
    
    		error_page   500 502 503 504  /50x.html;
    		
    		location = /50x.html {
    			root   html;
    		}
    
    		location ~* .(jpg|gif|png|js|css|svg)$ {
    			root /xxx/xxx/xxx/xxx; 
    			if (-f $request_filename) {
    				expires max;
    				break;
    			}
    		}
    
    		location ~ \.php$ {
    				fastcgi_pass   127.0.0.1:9000;
    				fastcgi_index  index.php;
    				include fastcgi_params;
    				fastcgi_connect_timeout 300;
    				fastcgi_send_timeout 300;
    				fastcgi_read_timeout 300;
    				fastcgi_split_path_info       ^(.+\.php)(/.+)$;
    				fastcgi_param PATH_INFO       $fastcgi_path_info;
    				fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
    				fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    				fastcgi_buffer_size 128k;
    				fastcgi_buffers 4 256k;
    				fastcgi_busy_buffers_size 256k;
            }
    		
    	
        }
    	
        server {
    	
    		listen 80;
    		server_name localhost;
    		rewrite ^   https://$host$request_uri? permanent;
    
        }
    
    }

在nginx配置文件中，把原来server块中的80端口（http访问）的语句改为443端口，并引入SSL各项配置，同时启用HSTS（HTTP严格传输安全），然后重启服务：

/usr/local/nginx/sbin/nginx -s reload

[70]: /images/20220510/f1d602ec02d9436691b375d7d20976fa.png
[70 1]: /images/20220510/2cc523985ed545e9845bbe7c11884ab4.png
[70 2]: /images/20220510/6c4258773f534c338d3da068be808ea4.png
[70 3]: /images/20220510/41e9757c118e4554af4facfae2c219d9.png
[70 4]: /images/20220510/20f321b3b8154626a40cd6b05721cc4d.png