docker安装nginx并配置Openssl生成自签证书单向认证

1、拉取nginx镜像

docker pull nginx

2、查看镜像

docker images

3、安装nginx

docker run -d --name nginx nginx

4、创建文件

mkdir -p /home/evan/workspace/wxserver/nginx/data/
mkdir -p /home/evan/workspace/wxserver/nginx/config/
mkdir -p /home/evan/workspace/wxserver/nginx/logs/

5、同步文件

docker cp nginx:/usr/share/nginx/html /home/evan/workspace/wxserver/nginx/data/
docker cp nginx:/etc/nginx/ /home/evan/workspace/wxserver/nginx/config/
docker cp nginx:/var/log/nginx/ /home/evan/workspace/wxserver/nginx/logs/

chmod -R 777 /home/evan/workspace/wxserver/nginx/config/nginx/
chmod -R 777 /home/evan/workspace/wxserver/nginx/logs/nginx:/var/log/nginx/
chmod -R 777 /home/evan/workspace/wxserver/nginx/logs/nginx
chmod -R 777 /home/evan/workspace/wxserver/nginx/ssl

6、删除nginx

docker rm -f nginx

7、创建ssl文件

mkdir -p /home/evan/workspace/wxserver/nginx/ssl

8、进入文件

cd /home/evan/workspace/wxserver/nginx/ssl

9、Openssl创建证书

# 生成服务端私钥(server.key)
openssl genrsa -des3 -out server.key 2048 
# 生成服务端证书签名请求(server.csr)
openssl req -new -key server.key -out server.csr
openssl rsa -in server.key -out server_unsecure.key

10、编辑default.conf

vi /home/evan/workspace/wxserver/nginx/config/nginx/conf.d/default.conf

内容如下：

server {
    listen       80 ssl;
    server_name  localhost;

    #charset koi8-r;
    #access_log  /var/log/nginx/host.access.log  main;

    # 增加ssl
    #ssl on;    #如果强制HTTPs访问，这行要打开
    ssl_certificate /home/evan/workspace/wxserver/nginx/ssl/server.crt;
    ssl_certificate_key /home/evan/workspace/wxserver/nginx/ssl/server_unsecure.key;
    ssl_session_cache  shared:SSL:1m;
    ssl_session_timeout 5m;
    # 指定密码为openssl支持的格式
    # ssl_protocols SSLv2 SSLv3 TLSv1.2;
 
   ssl_ciphers HIGH:!aNULL:!MD5; # 密码加密方式
   ssl_prefer_server_ciphers on;  # 依赖SSLv3和TLSv1协议的服务器密码将优先于客户端密码

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
    }

    #error_page  404              /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }

    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #    root           html;
    #    fastcgi_pass   127.0.0.1:9000;
    #    fastcgi_index  index.php;
    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
    #    include        fastcgi_params;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

11、创建nginx

docker run -d \
--privileged=true \
--name xinc-nginx \
-p 443:443 \
-p 8991:80 \
-v /home/evan/workspace/wxserver/nginx/data/html/:/usr/share/nginx/html \
-v /home/evan/workspace/wxserver/nginx/config/nginx/:/etc/nginx/ \
-v /home/evan/workspace/wxserver/nginx/logs/nginx:/var/log/nginx/ \
-v /home/evan/workspace/wxserver/nginx/ssl:/home/evan/workspace/wxserver/nginx/ssl \
-d nginx

访问端口https://192.168.68.23:8991/

参考文章：
使用Openssl生成自签证书
docker安装nginx并配置通过https访问的方法