# config https for nginx
# Patrick
sudo yum -y install zlib-devel zlib python-devel.x86_64
wget http://nginx.org/download/nginx-1.10.3.tar.gz
tar zxvf nginx-1.10.3.tar.gz
wget https://www.openssl.org/source/openssl-1.0.1k.tar.gz
tar zxvf openssl-1.0.1k.tar.gz
wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.40.tar.gz
tar zxvf pcre-8.40.tar.gz
cd nginx-1.10.3
./configure --user=nobody --group=nobody --prefix=/usr/local/nginx --with-http_stub_status_module --with-cc-opt='-O3' --with-cpu-opt=opteron --pid-path=/usr/local/nginx/nginx.pid --with-http_ssl_module --with-openssl=../openssl-1.0.2k --with-pcre=../pcre-8.40
make && make install
echo "################################# install nginx success"
cd ..
查看本地openssl版本
openssl version
将xxx.pem 和xxx.key 存放到/usr/local/nginx/cert
配置nginx.conf
vim /usr/local/nginx/conf/nginx.conf
server {
listen 443;
server_name your_hostname;
ssl on;
root html;
index index.html index.htm;
ssl_certificate /usr/local/nginx/cert/xxxxx.pem;
ssl_certificate_key /usr/local/nginx/cert/xxxxx.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}