1)安装OpenSSL
yum -y install openssl openssl-devel
mkdir /etc/pki/nginx
cd /etc/pki/nginx
2)生成私钥和自签证书
openssl req -newkey rsa:2048 -nodes -keyout rsa_private.key -x509 -days 365 -out cert.crt -subj "/C=CN/ST=GD/L=SZ/O=vihoo/OU=dev/CN=127.0.0.1/emailAddress=yy@qq.com"
监听443端口 或者自定义端口
server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server; # server_name _;
root /var/www/html;
ssl_certificate "/etc/pki/cert.crt";
ssl_certificate_key "/etc/pki/rsa_private.key";
ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
}
location ~ \.php$ {
root /var/www/html;
index index.html index.php;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params;
}
error_page 404 /404.html;
location = /40x.html {
} #
error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}
注意:安装nginx是后需要设置ssl模块
./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --user=nginx --group=nginx
重启nginx生效
systemctl restart nginx
网友评论