nginx安装http_ssl模块实现https并反向代理后端http
1.安装nginx
①tar -zxf nginx-1.14.2.tar.gz
②cd nginx-1.14.2
③./configure --prefix=/home/majd/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module
④make
⑤make install
2.修改nginx配置文件
将https证书放到conf目录下
vim nginx.conf
#user nobody;
worker_processes 1;
events {
worker_connections 65535;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
#tcp_nopush on;
#keepalive_timeout 0;
keepalive_timeout 65;
server {
listen 443 ssl;
server_name localhost;
#proxy_pass http://103.153.36.118:80;
ssl_certificate server.crt;
ssl_certificate_key server.key;
#ssl_session_timeout 5m;
#ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
#ssl_prefer_server_ciphers on;
ssl_session_timeout 5m;
ssl_protocols TLSv1;
ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
ssl_prefer_server_ciphers on;
#ssl_session_cache shared:SSL:1m;
#ssl_session_timeout 5m;
#ssl_ciphers HIGH:!aNULL:!MD5;
#ssl_prefer_server_ciphers on;
location / {
proxy_pass http://103.153.36.118:8080/najiang;
}
}
}
实现访问https://103.153.36.118 即可跳转http://103.153.36.118:8080/najaing