配置nginx+jetty8的https环境

1. 安装nginx的时候的需要http_ssl_module模块, 否则在配置完server后重启nginx会出现[emerg] 10464#0: unknown directive “ssl” in…

./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module

2. 配置jetty

点击查看: jetty8.1.3配置https/ssl

3. 生成证书

#cd /usr/local/nginx/conf
#openssl genrsa -des3 -out server.key 1024
#openssl req -new -key server.key -out server.csr
#openssl rsa -in server.key -out server_nopwd.key

4. 配置nginx的server

server {
    listen 443 ssl;
    server_name app.xxx.com;
    charset utf-8;
    ssl on;
    ssl_certificate  /usr/local/nginx/conf/server.crt;
    ssl_certificate_key  /usr/local/nginx/conf/server.key;
    location / {
    	proxy_pass https://192.168.1.10:8443;
    }
}

5. 强制停止nginx(使用reload的方式配置无法生效)

6.导出证书

#cd /usr/local/nginx/conf
#openssl x509 -in server.crt -out server.cer -outform der

在当前目录下获得server.cer证书

7.http和https共存: 增加一个域名并新增一个server配置

server {
    listen 80;
    server_name pc.xxx.com;
    charset utf-8;
    location / {
        proxy_pass http://192.168.1.10:8083;
    }
}