nginx配置ssl证书开启https访问

最新推荐文章于 2024-11-09 20:44:49 发布

风流倜傥唐伯虎

最新推荐文章于 2024-11-09 20:44:49 发布

阅读量413

点赞数 7

文章标签： nginx ssl https

本文链接：https://blog.csdn.net/weixin_41763571/article/details/135823547

版权

本文详细解释了Nginx服务器的配置，包括监听端口、重写规则、SSL配置、连接数限制以及gzip启用。指南涵盖了如何在conf目录下管理SSL证书并重启服务。

摘要由CSDN通过智能技术生成


#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  xxx.com;
		rewrite ^(.*)$ https://$host$1;
        
		#charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        }

    }


    # HTTPS server
    server {
        listen       443 ssl;
        server_name  xxx.com;

        ssl_certificate      cert/xxx.com.pem;
        ssl_certificate_key  cert/xxx.com.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
    }

}

注意：在nginx的conf目录下新建cert目录，把从服务器提供商下载的pem文件和key文件复制进去，最后重启nginx