wget https://github.com/openssl/openssl/archive/OpenSSL_1_1_1a.tar.gz
tar zxvf OpenSSL_1_1_1a.tar.gz

cd nginx-1.15.8/

通过--with-http_v2_module 打包http2 --with-openssl指定openssl目录

./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_realip_module --with-http_v2_module --with-openssl=../openssl-OpenSSL_1_1_1a
make -j2

sudo make install

最后在nginx conf server下配置

listen 443 ssl http2;
server_name localhost;

ssl_certificate_key /home/anfang/Downloads/cert/key.pem;
ssl_certificate /home/anfang/Downloads/cert/cert.pem;

openssl genrsa -out key.pem 2048

openssl req -new -x509 -sha256 -key key.pem
-out cert.pem -days 36500
-subj /C=CN/ST=Shanghai/L=Songjiang/O=ztgame/OU=tech/CN=mydomain.ztgame.com/emailAddress=myname@ztgame.com

openssl x509 -in cert.pem -noout -text