Alibaba Cloud SSL Certificate

Preface

        Why configure an SSL certificate? This is because a secure encrypted connection must be established between the website and the user to ensure that sensitive information is not stolen or tampered with during transmission.

        In fact, the name of the HTTPS certificate mainly comes from the use of SSL certificates to allow websites to implement HTTPS, so many are also called HTTPS certificates, and the correct name is called SSL certificates. HTTPS is a security protocol, and SSL certificates are digital certificates. However, if you need to implement the website HTTPS protocol, it is not possible without an SSL certificate, so they are related. If you need HTTPS to be completely trusted by the browser, you need to use an SSL certificate for identity authentication and configure it to the server before it can be trusted. For example, a small program must use https, and the SSL certificate is configured in Nginx.

1: Certificate application

The first step is to create a certificate

The second step is to bind the domain name of the certificate

 The third step is to submit for review and Alibaba Cloud will verify the information.

 

 The fourth step is to issue the certificate.

Two: Configure the certificate

The first step is to select the appropriate certificate to download:

The second step is to decompress the downloaded compressed package and put it under the nginx cert file in the server (ping the domain name and find the IP host):

 The third step is to find nginx on the host and back up the original conf file.

// 1、找到位置的指令
-- whereis nginx

// 2、进入nginx下的conf文件夹下,对原有的nginx.conf进行备份。
-- cp nginx.conf ./nginx.conf20230731

The fourth step is to download the original conf file, edit it, and replace it with the latest pem and key.

The fifth step is to test whether the nginx configuration file syntax is correct. If it is correct, restart nginx.

// 验证nginx配置文件语法是否错误。
-- ./nginx -t

// nginx重启
-- ./nginx -s reload

Three: Compare and verify whether the certificate fingerprint is correct. If it is correct, the configuration is successful.

 

 

Guess you like

Origin blog.csdn.net/qq_42405688/article/details/132470070