ubuntu Nginx 编译 带ssl

编译nginx， 做个笔记 免得以后忘记；

编译nginx 需要下载 apr pcre zlib openssl nginx

1.编译 apr

cd  apr-1.5.1

 ./configure --prefix=/usr/local/http/apr

make

make install

2.编译pcre

./configure --prefix=/usr/local/http/pcre --with-apr=/usr/local/http/apr

make

make install

3.编译zlib

 ./configure --prefix=/usr/local/http/zlib

make

make install

4.编译openssl

./config -fPIC --prefix=/usr/local/http/ssl

make

make install

2.编译nginx 

./configure --prefix=/usr/local/http/nginx --user=nginx --group=nginx     --with-http_ssl_module --with-http_flv_module --with-http_gzip_static_module  --with-openssl=/home/weit/Desktop/install/openssl-1.0.2k --with-pcre=/home/weit/Desktop/install/pcre-8.39 --with-zlib=/home/weit/Desktop/install/zlib-1.2.11

make

make install

nginx有一个奇怪的地方， 编译时是链接源码文件 而不是编译后的文件，否则会出一些奇奇怪怪的问题

启动nginx

/usr/local/http/nginx/sbin/nginx -c /usr/local/http/nginx/conf/nginx.conf

 浏览器登录127.0.0.1，能看到 

Welcome to nginx!

打开ssl ，打开/usr/local/http/nginx/conf/nginx.conf，将443注释部分打开，配置如下

server {
        listen       443;
        server_name  localhost:443;


        ssl on;
        ssl_certificate      /usr/local/http/nginx/ca/server.crt;
        ssl_certificate_key  /usr/local/http/nginx/ca/server.key;


        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;


        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;


        location / {
            root   html;
            index  index.html index.htm;
        }
    }

 浏览器登录https://127.0.0.1，提示证书不合法，直接跳过登录，能看到 

Welcome to nginx!

说明ssl配置成功！