浏览器 重定向次数限制_配置 ssl 出现了问题: chrome 浏览器显示 www.mydomain.com 将您重定向的次数过多...

环境: lnmp,申请了免费的腾讯 ssl 证书

我的 nginx.conf 配置如下:

user www www;

worker_processes auto;

error_log /home/wwwlogs/nginx_error.log crit;

pid /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.

worker_rlimit_nofile 51200;

events

{

use epoll;

worker_connections 51200;

multi_accept on;

}

http

{

map $http_cf_ipcountry $allow {

default yes;

CN yes;

RU no;

US yes;

}

include mime.types;

default_type application/octet-stream;

server_names_hash_bucket_size 128;

client_header_buffer_size 32k;

large_client_header_buffers 4 32k;

client_max_body_size 50m;

sendfile on;

tcp_nopush on;

keepalive_timeout 60;

tcp_nodelay on;

fastcgi_connect_timeout 300;

fastcgi_send_timeout 300;

fastcgi_read_timeout 300;

fastcgi_buffer_size 64k;

fastcgi_buffers 4 64k;

fastcgi_busy_buffers_size 128k;

fastcgi_temp_file_write_size 256k;

gzip on;

gzip_min_length 1k;

gzip_buffers 4 16k;

gzip_http_version 1.1;

gzip_comp_level 2;

gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;

gzip_vary on;

gzip_proxied expired no-cache no-store private auth;

gzip_disable "MSIE [1-6]\.";

#limit_conn_zone $binary_remote_addr zone=perip:10m;

##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.

server_tokens off;

access_log off;

server {

listen 80;

server_name www.mydomain.com;

# Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.

return 301 https://www.mydomain.com$request_uri;

}

server{

if ($allow = no) {

return 403;

}

location ~ /.well-known {

allow all;

}

listen 443 default ssl;

#listen [::]:80 default_server ipv6only=on;

server_name www.oneacreland.com;

ssl_certificate /usr/local/nginx/conf/1_www.mydomain.com_bundle.crt;

ssl_certificate_key /usr/local/nginx/conf/2_www.mydomain.com.key;

ssl_session_timeout 5m;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

ssl_prefer_server_ciphers on;

index index.html index.htm index.php;

root /home/wwwroot/default;

#error_page 404 /404.html;

include enable-php.conf;

location /nginx_status

{

stub_status on;

access_log off;

}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

{

expires 30d;

}

location ~ .*\.(js|css)?$

{

expires 12h;

}

location ~ /\.

{

deny all;

}

access_log /home/wwwlogs/access.log;

}

include vhost/*.conf;

}

重启: lnmp nginx restart 出现警告:

toping nginx... nginx: [warn] conflicting server name "www.mydomain.com" on 0.0.0.0:80, ignored

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
要将Tomcat升级为使用HTTPS,需要对web.xml文件进行相应配置。以下是配置步骤: 1. 生成SSL证书: 首先,需要生成SSL证书。可以使用Java的keytool工具来生成自签名证书。执行以下命令来生成证书: ``` keytool -genkey -alias mydomain -keyalg RSA -keypass changeit -storepass changeit -validity 365 -keystore keystore.jks ``` 这将在当前目录下生成一个名为keystore.jks的证书文件。 2. 配置Tomcat的server.xml文件: 打开Tomcat的配置文件server.xml,找到以下注释: ``` <!-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the JSSE configuration, when using APR, the connector should be using the OpenSSL style configuration described in the APR documentation --> ``` 在这个注释后面添加以下配置: ``` <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" keystoreFile="path/to/your/keystore.jks" keystorePass="changeit" clientAuth="false" sslProtocol="TLS" /> ``` 将`path/to/your/keystore.jks`替换为生成的证书文件的实际路径。 3. 配置web.xml文件: 在web.xml中添加以下安全约束来强制使用HTTPS: ``` <security-constraint> <web-resource-collection> <web-resource-name>Protected Area</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> ``` 这将强制所有URL都使用HTTPS访问。 保存并关闭所有配置文件。重新启动Tomcat服务器后,就可以通过HTTPS访问应用程序了。

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值