HTTP--http之https(九)

生成公钥和私钥

用git运行以下命令，然后一直按回车

openssl req -x509 -newkey rsa:2048 -nodes -sha256 -keyout localhost-privkey.pem -out localhost-cert.pem

目录结构

文件内容

test.conf

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    } 

运行本地服务

test.com

https://test.com

test.com重定向到https://test.com

test.conf

    proxy_cache_path cache levels=1:2 keys_zone=my_cache:10m;

    server {
        listen 80 default_server;
        listen [::]:80 default_server;
        server_name test.com;
        return 302 https://$server_name$request_uri;
    }

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    }