Nginx 开启负载均衡并开启https

准备工具

nginx-1.16.1  https://nginx.org/download/nginx-1.16.1.zip
openssl http://downloads.sourceforge.net/gnuwin32/openssl-0.9.8h-1-src-setup.exe
SSL证书 （没有的去阿里云腾讯云去生成）ssl证书相互转换 参考博客：https://blog.csdn.net/wzj_whut/article/details/85715347

从pfx中导出公钥/私钥/证书

1、导出私钥

   

 openssl pkcs12 -in my.pfx -out my2.key -nocerts

2、导出证书

   

 openssl pkcs12 -in my.pfx -out my2.crt -nodes -nokeys -nokeys

3、生成无密码证书

 为了解决：windows nginx出现 was not signaled for
Enter PEM pass phrase。我们需要做的是剥离这个密码，利用如下OpenSSL命令生成server.key.unsecure文件：

   

 openssl rsa -in my2.key  -out my2.key.unsecure

4、生成公钥

   

 openssl x509 -in my2.crt -outform PEM -out my2.pem

nginx.conf

#user  nobody;
worker_processes  32;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  20000;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;
    
    #服务器的集群  
    upstream  flfw.examos.cn { 
       server 127.0.0.1:8088;
       server 192.168.10.59:8088;
      

    }     
    server {
        listen       80;
        server_name  flfw.examos.cn;
        rewrite ^(.*)$ https://${server_name}$1 permanent;
    }
    server {
        listen 443 ssl;
        server_name  flfw.examos.cn;    
        ssl_certificate      ssl/flfw.examos.cn.pem;
        ssl_certificate_key  ssl/flfw.examos.cn.key.unsecure;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!AESGCM;
        ssl_prefer_server_ciphers  on;
        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            proxy_pass http://flfw.examos.cn;
            root   html;
            index  index.html index.htm;
            charset utf-8,gbk;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }
}