nginx多域名、多证书

最新推荐文章于 2024-08-30 16:28:31 发布

weixin_30535043

最新推荐文章于 2024-08-30 16:28:31 发布

阅读量539

点赞数

文章标签：运维

原文链接：http://www.cnblogs.com/xiaoyou2018/p/10748226.html

版权

环境：

一台nginx服务器 192.168.10.251

两台windowsserver2012 IIS服务器（192.168.10.252、192.168.10.253）

从阿里云上下载ssl证书并上传到nginx服务器

nginx配置文件添加证书

upstream test_1.com {
       # ip_hash;
               server 192.168.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
               server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
                       }
server {
   listen 443;
    #access_log  logs/access.log  ;
       server_name  test_1.com;         
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_1.pem;
       ssl_certificate_key /usr/local/nginx/cert/test_1.key;                
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;                                      
   location / {
       root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_1.com;
          client_max_body_size 50m;
                 }
     }
upstream test_2.com {
       # ip_hash;
               server 122.226.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
               server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
                       }
server {
   listen 443;
        #access_log  logs/access.log  ;
       server_name  test_2.com;        
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_2.pem;
       ssl_certificate_key /usr/local/nginx/cert/test_2.key;
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;
   location / {
           root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_2.com;
          client_max_body_size 50m;
                 }
     }
}

参考：

https://blog.csdn.net/fragrant_no1/article/details/83785882
https://www.cnblogs.com/beyang/p/7718463.html
https://blog.csdn.net/weixin_38187317/article/details/81670073
https://www.cnblogs.com/beyang/p/7718463.html

转载于:https://www.cnblogs.com/xiaoyou2018/p/10748226.html