nginx安装http_ssl模块实现https并反向代理后端http

nginx安装http_ssl模块实现https并反向代理后端http

1.安装nginx

①tar -zxf nginx-1.14.2.tar.gz
②cd nginx-1.14.2
③./configure --prefix=/home/majd/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module

④make
⑤make install

2.修改nginx配置文件

将https证书放到conf目录下

vim nginx.conf

#user  nobody;
worker_processes  1;    
    
events {
    worker_connections  65535;
}
http {
    include       mime.types;
    default_type  application/octet-stream;    
    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;    
    
    server {
        listen       443 ssl;
        server_name  localhost;
	    #proxy_pass http://103.153.36.118:80;
        ssl_certificate      server.crt;
        ssl_certificate_key  server.key;
        #ssl_session_timeout 5m;
        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	    #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
	    #ssl_prefer_server_ciphers on;
	    ssl_session_timeout 5m;
	    ssl_protocols TLSv1;
     	ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
    	ssl_prefer_server_ciphers on;
        #ssl_session_cache    shared:SSL:1m;
        #ssl_session_timeout  5m;

        #ssl_ciphers  HIGH:!aNULL:!MD5;
        #ssl_prefer_server_ciphers  on;

        location / {
	    proxy_pass http://103.153.36.118:8080/najiang;
        }

    }
}

实现访问https://103.153.36.118 即可跳转http://103.153.36.118:8080/najaing