CentOS7安装和配置Nginx（https）

安装Nginx

先下载  

# wget http://nginx.org/download/nginx-1.11.7.tar.gz
# tar -zxvf nginx-1.11.7.tar.gz
# yum install pcre-devel zlib-devel gcc gcc-c++ openssl-devel -y
# groupadd nginx
# useradd -M -s /sbin/nologin -g nginx nginx
# mkdir -p /usr/local/bin/nginx
# chown -R nginx:nginx /usr/local/bin/nginx
# cd nginx-1.11.7
#./configure --prefix=/usr/local/bin/nginx --with-http_stub_status_module --with-http_ssl_module
# make && make install
开机自启动
# vim /usr/lib/systemd/system/nginx.service
[Unit]
Description=nginx 
After=network.target 

[Service] 
Type=forking 
ExecStart=/usr/local/bin/nginx/sbin/nginx -c /usr/local/bin/nginx/conf/nginx.conf 
ExecReload=/usr/local/bin/nginx/sbin/nginx -s reload 
ExecStop=/usr/local/bin/nginx/sbin/nginx -s stop 
Restart=always
RestartSec=30 
PrivateTmp=true 

[Install] 
WantedBy=multi-user.target
# systemctl enable nginx.service
# systemctl start nginx.service

端口查看
# netstat -lntp|grep nginx
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 15136/nginx: master

在浏览器访问http://ip

生成私钥和证书
# mkdir ck 
# cd ck/
# openssl genrsa -des3 -out server.key 1024
# openssl req -new -key server.key -out server.csr
# cp server.key server.key.org
# openssl rsa -in server.key.org -out server.key
# openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
# vi nginx.conf
server {
listen 8090;
server_name nginx-server;

ssl on;
ssl_certificate /usr/local/nginx/ck/server.crt;
ssl_certificate_key /usr/local/nginx/ck/server.key;