1、上传ssl证书到服务器/usr/local/nginx/ssl/xxx.pfx
2、执行命令:
openssl pkcs12 -in /usr/local/nginx/ssl/xxxx.pfx -nocerts -nodes -out /usr/local/nginx/ssl/xxxx.key
输入密码:
3、执行命令:
openssl pkcs12 -in /usr/local/nginx/ssl/xxxx.pfx -clcerts -nokeys -out /usr/local/nginx/ssl/xxxx.crt
输入密码:
4、修改nginx.conf
server {
listen 443;
server_name xxxx.com.cn;
index index.html index.htm index.php;
root /home/wwwroot/xxxx;
ssl on;
ssl_certificate /usr/local/nginx/ssl/xxxx.crt;
ssl_certificate_key /usr/local/nginx/ssl/xxxx.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
include enable-php.conf;
location / {
if (!-e $request_filename) {
rewrite ^/(.*)$ /?s=$1 last;
}
}
access_log /home/wwwlogs/access.log;
}
5、重载nginx
nginx -t
nginx -s reload
但是,安装后安卓微信访问时白屏,安卓浏览器访问时,提示是“不安全的证书”。
是因为“证书链不完整”。在cret中添加“中级证书”后就好了