The issue of a pagoda site to bind more domain names pagoda ssl certificate

Currently "pagoda SSL" application automatically bind a certificate, and that is the root domain name www domain name, also need to bind the mobile phone side you need to bind the m multiple domain names
if a multi-domain binding site data point to the same need to create multiple sites File Directory.

The same way, without the premise of the new site, manually modify the "Site Profiles";

Tested multi-domain certificate, the disadvantage is not re-editing by the pagoda site configuration, otherwise it will overwrite the file

follows, first apply for multiple sites certificate, and then in the pagoda site "www.bt.cn" sign in the upper right corner member account, download the certificate, the certificate Nginx compressed copy of the package, upload / www / server / panel / vhost / cert / domain, any directory (multiple domain names are uploaded)

to open the site "site configuration" copy paste copy of the same content, and then modify the contents of the paste domain name, replaced with a new domain name certificate (first line is bundle.pem, the second line is .key)

Note: the domain of testing above multiple-site configuration can not be duplicated for safety during, before the amendment, the first backup of the original configuration

and then save the configuration and restart Nginx

    Server 
    { 
        the listen 80; 
        the listen HTTP2 SSL 443; 
        server_name 123.cn; 
        index the index.php index.html index.htm default.php Default.htm the default.html; 
        the root / WWW / wwwroot / 123_cn; 
       
        # the SSL-configuration the START the SSL Do not delete or modify the next line annotated 404 rules 
        #error_page 404 / 404.html; 
        ssl_certificate /www/server/panel/vhost/cert/123.cn/fullchain.pem; 
        ssl_certificate_key / the WWW / Server / Panel / vhost /cert/123.cn/privkey.pem; 
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:!!!! ECDHE: ECDH: AES: HIGH: NULL: aNULL: MD5: ADH !!: RC4: DH: DHE;!  
        ssl_prefer_server_ciphers ON;
        ssl_session_cache Shared: SSL: 10m; 
        ssl_session_timeout 10m; 
        error_page 497 HTTPS: // $ $ Host REQUEST_URI; 

        # the SSL-the END 
       
        # ERROR-PAGE the START-error page configuration, can be annotated, delete or modify 
        error_page 404 /404.html; 
        error_page 502 /502.html; 
        # the END-ERROR-PAGE 
       
        # the PHP the PHP the START-references the INFO-configuration, can be annotated or modify 
        the include PHP-enable-53.conf; 
        # the PHP the END-the INFO- 
       
        # the rEWRITE the START-references the URL rewriting rules, modify the rule will lead to pseudo-static panel settings fail 
        the include /www/server/panel/vhost/rewrite/123.cn.conf; 
        # END-REWRITE 
       
        # disable access to files or directories 
        . location ~ ^ / (\ user.ini | \ .htaccess | \ .git | \ .project | LICENSE | README.md) 
        {
            return 404;  
        }
       
        .. LOCATION ~ * \ (GIF | JPG | jpeg | PNG | BMP | SWF) $ 
        { 
            the Expires 30d; 
            access_log OFF; 
        } 
       
        .. LOCATION ~ * \ (JS | CSS) $? 
        { 
            the Expires 12h; 
            access_log OFF ; 
        } 
        access_log /www/wwwlogs/123.cn.log; 
    } 

    Server 
    { 
        the listen 80; 
            the listen HTTP2 SSL 443; 
        server_name s.123.cn; 
        index the index.php index.html index.htm default.php Default.htm default. HTML; 
        the root / WWW / wwwroot / 123_cn; 
       
        # the START the SSL the SSL-configuration, do not delete or modify the next line with comments rules 404
        404 #error_page / 404.html; 
        ssl_certificate /www/server/panel/vhost/cert/123.cn/1_s.123.cn_bundle.pem; 
        ssl_certificate_key /www/server/panel/vhost/cert/123.cn/0_s. 123.cn.key; 
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:!!!!! ECDHE: ECDH: AES: HIGH: NULL: aNULL: MD5: ADH: RC4 :! ! DH: DHE; 
        ssl_prefer_server_ciphers ON; 
        ssl_session_cache Shared: SSL: 10m; 
        ssl_session_timeout 10m; 
        error_page 497 HTTPS: // $ Host $ REQUEST_URI; 

        # SSL-END 
       
        # eRROR-pAGE the START-error page configuration, you can annotate, delete or modify 
        error_page /404.html 404; 
        error_page 502 /502.html; 
        # the END-ERROR-PAGE
        
        # the PHP the PHP the START-references the INFO-configuration, or modifications can be annotated
        PHP-53.conf-enable the include; 
        # the PHP the END-the INFO- 
       
        # the REWRITE the START-references the URL rewriting rules, modifying rules will lead to pseudo-static panels disposed failure 
        include / www / server / panel / vhost / rewrite / 123. cn.conf; 
        # the REWRITE the END- 
       
        # prohibit access to the file or directory 
        (. \ the user.ini | \ .htaccess | \ .git | \ .project | the LICENSE | README.md) LOCATION ~ ^ / 
        { 
            return 404; 
        } 
       
        LOCATION .. ~ * \ (GIF | JPG | jpeg | PNG | BMP | SWF) $ 
        { 
            the Expires 30d; 
            access_log OFF; 
        } 
       
        .. LOCATION ~ * \ (JS | CSS) $? 
        {  
            the Expires 12h;
            access_log OFF; 
        } 
        access_log / the WWW / wwwlogs /123.cn.log;
    }

 

Meaning SSL inside two documents
fullchain.pem is a certificate and the root certificate (certificate put above, the root certificate placed below)
the privkey.pem secret key certificate that is

 

Reference website: https: //www.bt.cn/bbs/thread-8470-1-1.html btwaf = 80843689?

 

Guess you like

Origin www.cnblogs.com/steven9898/p/11345240.html