Nginx配置HTTPS

阿里云服务器准备:

1.购买ECS服务器
2.购买域名
3.域名和服务器备案
4.申请免费CA证书

将下载好的签名重名上传至服务器

cd /usr/local/nginx/conf/
mkdir cert

设置nginx配置文件运行bbs支持https协议:

vi /usr/local/nginx/conf/nginx.conf
 server {
        listen       443 ssl;
        server_name  www.liuyuanshan.top;

        ssl_certificate      cert/liuyuanshan.top.pem;
        ssl_certificate_key  cert/liuyuanshan.top.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

       # location / {
            root   html/bbs;
           index  index.php index.html index.htm;
       # }

        location ~ \.php$ {
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include        fastcgi_params;
        }
    }

语法检测

/usr/local/nginx/sbin/nginx -t

在不关闭nginx情况下重载nginx配置文件

pkill -HUP nginx

客户端测试

https://www.liuyuanshan.top/

需要避开两个坑

1.这里默认读取index.html文件，但还不能解析php文件，实际需要加入一段解析php脚本代码段

    location ~ \.php$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include        fastcgi_params;
    }

server {
        listen       443 ssl;
        server_name  www.liuyuanshan.top;

        ssl_certificate      cert/liuyuanshan.top.pem;
        ssl_certificate_key  cert/liuyuanshan.top.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

       # location / {
            root   html/bbs;
           index  index.php index.html index.htm;
       # }

        location ~ \.php$ {
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_index  index.php;
                fastcgi_param  SCRIPT_FILENAME $document_root$fastcgi_script_name;
                include        fastcgi_params;
        }
    }

2.nginx用户对html目录的执行权限设置

cd /usr/local/nginx/html
setfacl -m u:nginx:rwx -R ../html/
setfacl -m d:u:nginx:rwx -R ../html/