Nginx配置免费SSL证书
SSL证书HTTPS优势
购买域名型免费版(DV)SSL证书
安装SSL证书:参考官方文档
nginx中的配置:nginx配置https转发到tomcat
server {
listen 443;
server_name lzhhuo.wordpython.com www.lzhhuo.wordpython.com;
ssl on;
index index.html index.htm;
if ($http_host ~ "^lzhhuo.wordpython.com$") {
rewrite ^(.*) https://www.lzhhuo.wordpython.com$1 permanent;
}
ssl_certificate 1_www.lzhhuo.wordpython.com_bundle.crt;
ssl_certificate_key 2_www.lzhhuo.wordpython.com.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://127.0.0.1:8080/;
proxy_connect_timeout 600;
proxy_read_timeout 600;
}
}
server {
listen 80;
server_name lzhhuo.wordpython.com www.lzhhuo.wordpython.com;
if ($http_host ~ "^lzhhuo.wordpython.com$") {
rewrite ^(.*) https://www.lzhhuo.wordpython.com$1 permanent;
}
rewrite ^(.*) https://www.lzhhuo.wordpython.com$1 permanent;
location / {
root /usr/local/apache-tomcat-8.5.28/webapps/ROOT;
index index.html index.htm;
}
}
可能出现的问题:
错误:nginx:[emerg]unknown directive ssl错误
原因:配置SSL证书需要引用到nginx的中SSL这模块,然而我们一开始编译的Nginx的时候并没有把SSL模块一起编译进去。
解决: Nginx配置SSL证书时——nginx:[emerg]unknown directive ssl错误
效果:
Chrome:
Firefox:
IE:
Opera:
还没有评论,来说两句吧...