https证书申请配置操作,

 

购买新证书

 

 

 

域名验证成功后,

 

 

解压后

 

 

 

部署证书到CDN

如果域名和申请的域名不一致 https就用不了

如图

 

 

如果o2o.catcook.top来配置的话,就可以使用

 

 

 

 

 

 

 

 

 

开启443端口号

/sbin/iptables -I INPUT -p tcp --dport 443 -j ACCEPT

# /sbin/iptables -L -n

 

 

将下载的证书传到服务器

 

 

 

 

配置nginx服务器

server {
    listen 443;
    server_name catcook.top;
    root /home/wwwroot/default/ZooLight/public/;
    index index.html index.htm;
    ssl_certificate  cert/catcook.top.crt;
    ssl_certificate_key cert/catcook.top.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location / {
        index index.html index.htm;
    }
include rewrite/other.conf;
    #error_page   404   /404.html;
    # Deny access to PHP files in specific directory
    #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    include enable-php-pathinfo.conf;
 # --start--- TP5加上这一块 支持pathinfo
    if (!-e $request_filename) {
        rewrite ^/(.*)$ /index.php/$1 last;
        break;
    }
    location ~ [^/]\.php(/|$) {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        try_files $fastcgi_script_name =404;
        set $path_info $fastcgi_path_info;
        fastcgi_param PATH_INFO $path_info;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
    }
    # --end--- TP5加上这一块 支持pathinfo
}

server
{
    listen 80;
    #listen [::]:80;
    server_name _;
    index index.html index.htm index.php default.html default.htm default.php;
    root  /home/wwwroot/default/ZooLight/public/;
    include rewrite/other.conf;
    #error_page   404   /404.html;
    # Deny access to PHP files in specific directory
    #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    include enable-php-pathinfo.conf;

    # --start--- TP5加上这一块 支持pathinfo
    if (!-e $request_filename) {
        rewrite ^/(.*)$ /index.php/$1 last;
        break;
    }
    location ~ [^/]\.php(/|$) {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        try_files $fastcgi_script_name =404;
        set $path_info $fastcgi_path_info;
        fastcgi_param PATH_INFO $path_info;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
    }
    # --end--- TP5加上这一块 支持pathinfo

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
    }
    location ~ .*\.(js|css)?$
    {
        expires      12h;
    }

  location ~ .*\.(js|css)?$
    {
        expires      12h;
    }
    location ~ /.well-known {
        allow all;
    }
    location ~ /\.
    {
        deny all;
    }
    access_log  /home/wwwlogs/zoo.log;
}

 

 

访问项目 https://catcook.top