Nginx配置Https

提示：扫一扫查出行
【扫一扫了解最新限行尾号】
复制提示

1.申请证书：

https://console.qcloud.com/ssl?utm_source=yingyongbao&utm_medium=ssl&utm_campaign=qcloud

2.将证书导入服务器，xftp或者FileZilla都可以:

3.修改Nginx，我的Nginx位于/etc/nginx/ :

Nginx自带ssl配置，删掉注释，修改证书位置就好了。

80端口配置：

server {
listen default_server;
listen [::]: default_server;
server_name _;
#root /usr/share/nginx/html;
#注意添加下面这行代码，用于重定向
rewrite ^(.*) https://$server_name$1 permanent; # Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf; location / {
} error_page 404 /404.html;
location = /40x.html {
} error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}

443端口设置:

server {
listen ssl http2 default_server;
listen [::]: ssl http2 default_server;
server_name _;
root /usr/share/nginx/html;# ssl_certificate "/etc/pki/nginx/server.crt";
# ssl_certificate_key "/etc/pki/nginx/private/server.key";
ssl_certificate /etc/nginx/conf.d/1_www.bincoding.cn_bundle.crt;
ssl_certificate_key /etc/nginx/conf.d/2_www.bincoding.cn.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on; # Load configuration files for the default server block.
include /etc/nginx/default.d/*.conf; location / {
} error_page 404 /404.html;
location = /40x.html {
} error_page 500 502 503 504 /50x.html;
location = /50x.html {
}
}