Nginx配置免费SSL证书

SSL证书HTTPS优势

购买域名型免费版（DV）SSL证书

安装SSL证书：参考官方文档

nginx中的配置：nginx配置https转发到tomcat

	server {
		listen 443;
		server_name  lzhhuo.wordpython.com www.lzhhuo.wordpython.com;
		ssl on;
		index index.html index.htm;   
       if ($http_host ~ "^lzhhuo.wordpython.com$") {
                rewrite  ^(.*)    https://www.lzhhuo.wordpython.com$1 permanent;
        }
		ssl_certificate  1_www.lzhhuo.wordpython.com_bundle.crt; 
		ssl_certificate_key 2_www.lzhhuo.wordpython.com.key; 
		ssl_session_timeout 5m;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
		ssl_prefer_server_ciphers on;
		location / {
		proxy_pass http://127.0.0.1:8080/;
		proxy_connect_timeout 600;
		proxy_read_timeout 600;
		}
		}
    server {
         listen       80;
         server_name   lzhhuo.wordpython.com  www.lzhhuo.wordpython.com;
          if ($http_host ~ "^lzhhuo.wordpython.com$") {
                rewrite  ^(.*)    https://www.lzhhuo.wordpython.com$1 permanent;
        }
  	rewrite  ^(.*)    https://www.lzhhuo.wordpython.com$1 permanent;
	location / {
	root /usr/local/apache-tomcat-8.5.28/webapps/ROOT;
	index index.html index.htm;
}
}

可能出现的问题：

错误：nginx:[emerg]unknown directive ssl错误

原因：配置SSL证书需要引用到nginx的中SSL这模块，然而我们一开始编译的Nginx的时候并没有把SSL模块一起编译进去。

解决： Nginx配置SSL证书时——nginx:[emerg]unknown directive ssl错误

效果：

Chrome:

Firefox:

IE:

Opera: