centos下使用nginx部署https

1.   cd  /usr/local /src 查看nginx

    /usr/local/nginx/sbin    

如果有说明有ssl 模板

如果没有 则如下

2  安装prce  /usr/local/src 

    wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.39.tar.gz 

          tar -zxvf  pcre-8.39.tar.gz 

          cd  pcre-8.39

 . /configure && make && make install

3  安装zlib  cd  /usr/local/src 

    wget http://zlib.NET/zlib-1.2.8.tar.gz  

    tar -zxvf    zlib-1.2.8.tar.gz  

   cd   zlib-1.2.8

 . /configure && make && make install 

4 .   安装openssl

wget http://www.openssl.org/source/ openssl-1.0.2d.tar.gz

  tar -zxvf   openssl-1.0.2d.tar.gz

  cd    openssl-1.0.2d

  ./config --prefix=/usr/local/openssl-1.0.2d

       make && make install 

5  安装 nginx  cd  /usr/local/src          

        wget http://nginx.org/download/nginx-1.9.8.tar.gz

       tar -zxvf   nginx-1.9.8

 6  开始编译  cd  /usr/local/src/ nginx-1.9.8

./configure --prefix=/usr/local/nginx \
--with-http_ssl_module \
--with-pcre=/usr/local/src/pcre-8.39 \
--with-zlib=/usr/local/src/zlib-1.2.8 \
--with-openssl=/usr/local/src/openssl-1.0.2d

执行  make 

  

cd /usr/local/src/nginx-1.9.8  

   重命名旧版本的二进制文件

 mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.old

重新拷贝一份新的二进制文件       
cp objs/nginx /usr/local/nginx/sbin/

7 在源码下升级   

cd /usr/local/src/nginx-1.9.8  

 make upgrade

/usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
kill -USR2 `cat /usr/local/nginx/logs/nginx.pid`
sleep 1
test -f /usr/local/nginx/logs/nginx.pid.oldbin
kill -QUIT `cat /usr/local/nginx/logs/nginx.pid.oldbin`
 
#最后确认一下nginx进程,可以发现有2个主进程，并且有正在关闭的进程（shutting down）：
linux-gz215:/usr/local/src/nginx-1.6.0 # ps aux | grep nginx
root 969 0.0 0.3 8260 1844 ? Ss Dec09 0:01 nginx: master process /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
www 4178 0.1 2.5 19112 12872 ? S 16:32 0:00 nginx: worker process is shutting down
www 4210 0.1 2.5 19112 12872 ? S 16:32 0:00 nginx: worker process is shutting down
www 4657 0.1 2.5 19112 12872 ? S 16:32 0:00 nginx: worker process is shutting down

过段时间则发现老的进程会退出

root      1700     1  0 Dec06 ?        00:00:00 nginx: master process /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
nobody    2440  1700  0 Dec06 ?        00:00:00 nginx: worker process
root      7486  5895  0 16:36 pts/0    00:00:00 grep --color=auto nginx

8  腾讯云申请 https 免费一年

mkdr   /usr/local/nginx/ssl

 cd /usr/local/nginx/ssl

上传

9配置nginx

server {
        listen       80;
        listen      443  ssl;


        server_name  www.xxx.com;
        #charset koi8-r;
        
        #access_log  logs/host.access.log  main;


proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          ssl_certificate /usr/local/nginx/ssl/yun.crt; 
       ssl_certificate_key /usr/local/nginx/ssl/yun.key;  
       ssl_session_timeout  5m;  
       ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
       ssl_ciphers  HIGH:!ADH:!EXPORT56:RC4+RSA:+MEDIUM;   


        location / {
         client_max_body_size 50M;
    proxy_pass http://127.0.0.1:8080;
    proxy_connect_timeout 600;
    proxy_read_timeout 600;
        }
    }

9 重启 nginx -s reload