Nginx如何配置https协议

Nginx如何配置https协议

1，首先得有证书。

可以去域名服务商免费申请，如阿里云，腾讯云。

https://ninghao.net/blog/4449

也可以利用openssl生成证书：

http://blog.51cto.com/shhlamp/2120022

参考：

https://blog.csdn.net/smartdt/article/details/80027579

https://www.cnblogs.com/bincoding/p/6118270.html

2，配置Nginx，如果http配置的有端口转发。在https需要再配置一遍。

server {
        listen       443 ssl;
        server_name  xcx.klint.cn;
        ssl on;

        ssl_certificate      /usr/local/ssl/1727846_xcx.klint.cn.pem;
        ssl_certificate_key  /usr/local/ssl/1727846_xcx.klint.cn.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

    #    ssl_ciphers  HIGH:!aNULL:!MD5;
    #    ssl_prefer_server_ciphers  on;

        location /cms {  
            index index;
            proxy_pass  https://cms ;
           
        }
        location /site {  
            index index;
            proxy_pass  https://site ;
        }

端口转发配置的内容：

location /cms {  
            index index;
            proxy_pass  https://cms ;
           
        }
        location /site {  
            index index;
            proxy_pass  https://site ;
        }
                
   
        location =/ {  
        rewrite / /cms;         
        }

4，重启nginx：

/usr/local/nginx/sbin/nginx -s reload