https证书申请配置操作,

最新推荐文章于 2024-09-25 18:37:09 发布

芝麻开门2015

最新推荐文章于 2024-09-25 18:37:09 发布

阅读量1k

点赞数

分类专栏：服务器

本文链接：https://blog.csdn.net/resilient/article/details/89330358

版权

服务器专栏收录该内容

34 篇文章 0 订阅

订阅专栏

购买新证书

域名验证成功后,

解压后

部署证书到CDN

如果域名和申请的域名不一致 https就用不了

如图

如果o2o.catcook.top来配置的话,就可以使用

开启443端口号

/sbin/iptables -I INPUT -p tcp --dport 443 -j ACCEPT

# /sbin/iptables -L -n

将下载的证书传到服务器

配置nginx服务器

server {
    listen 443;
    server_name catcook.top;
    root /home/wwwroot/default/ZooLight/public/;
    index index.html index.htm;
    ssl_certificate  cert/catcook.top.crt;
    ssl_certificate_key cert/catcook.top.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location / {
        index index.html index.htm;
    }
include rewrite/other.conf;
    #error_page   404   /404.html;
    # Deny access to PHP files in specific directory
    #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    include enable-php-pathinfo.conf;
 # --start--- TP5加上这一块 支持pathinfo
    if (!-e $request_filename) {
        rewrite ^/(.*)$ /index.php/$1 last;
        break;
    }
    location ~ [^/]\.php(/|$) {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        try_files $fastcgi_script_name =404;
        set $path_info $fastcgi_path_info;
        fastcgi_param PATH_INFO $path_info;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
    }
    # --end--- TP5加上这一块 支持pathinfo
}

server
{
    listen 80;
    #listen [::]:80;
    server_name _;
    index index.html index.htm index.php default.html default.htm default.php;
    root  /home/wwwroot/default/ZooLight/public/;
    include rewrite/other.conf;
    #error_page   404   /404.html;
    # Deny access to PHP files in specific directory
    #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
    include enable-php-pathinfo.conf;

    # --start--- TP5加上这一块 支持pathinfo
    if (!-e $request_filename) {
        rewrite ^/(.*)$ /index.php/$1 last;
        break;
    }
    location ~ [^/]\.php(/|$) {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        try_files $fastcgi_script_name =404;
        set $path_info $fastcgi_path_info;
        fastcgi_param PATH_INFO $path_info;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        include fastcgi.conf;
    }
    # --end--- TP5加上这一块 支持pathinfo

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
    {
        expires      30d;
    }
    location ~ .*\.(js|css)?$
    {
        expires      12h;
    }

  location ~ .*\.(js|css)?$
    {
        expires      12h;
    }
    location ~ /.well-known {
        allow all;
    }
    location ~ /\.
    {
        deny all;
    }
    access_log  /home/wwwlogs/zoo.log;
}