centos7 ngnix环境下http转https

忘是亡心i 2022-01-29 08:09 249阅读 0赞

###                                             centos7 ngnix环境下http转https ###

最近在对接小程序接口的时候，对方要求必须调用https，小程序接口规定是https，那么怎么来进行配置呢？首先如果你没有搭建ngnix，那么你可以参考我以前的博文[https://mp.csdn.net/postedit/78408001][https_mp.csdn.net_postedit_78408001]，按照步骤一步一步来即可完成安装。我用的ngnix版本是nginx-1.8.0.tar.gz， ngnix安装在/usr/local/nginx/conf此目录下

一、准备ssl证书长这个样子，截个图给大家看一下

![20190521154004718.jpg][]

将其放到/usr/local/nginx/conf目录下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxNDQyODc_size_16_color_FFFFFF_t_70][]

二、打开ngnix的配置文件nginx.conf，目录是/usr/local/nginx/conf，都在同一个目录，首先看总的配置目录

\#user  nobody;  
worker\_processes  1;

\#error\_log  logs/error.log;  
\#error\_log  logs/error.log  notice;  
\#error\_log  logs/error.log  info;

\#pid        logs/nginx.pid;

events \{  
    worker\_connections  1024;  
\}

http \{  
    include       mime.types;  
    default\_type  application/octet-stream;

\#log\_format  main  '$remote\_addr - $remote\_user \[$time\_local\] "$request" '  
    \#                  '$status $body\_bytes\_sent "$http\_referer" '  
    \#                  '"$http\_user\_agent" "$http\_x\_forwarded\_for"';

\#access\_log  logs/access.log  main;

sendfile        on;  
    \#tcp\_nopush     on;

\#keepalive\_timeout  0;  
    keepalive\_timeout  65;

\#gzip  on;

server \{  
        listen       80;  
        server\_name  localhost;  
        rewrite ^(.\*)$ https;  \# 把所有的http自动转为https

\#charset koi8-r;

\#access\_log  logs/host.access.log  main;

location / \{   \# 配置静态http代理  
            root   /login;  
            index  index.html index.htm;  
        \}

\#error\_page  404              /404.html;

\# redirect server error pages to the static page /50x.html  
        \#  
        error\_page   500 502 503 504  /50x.html;  
        location = /50x.html \{  
            root   html;  
        \}

\# proxy the PHP scripts to Apache listening on 127.0.0.1:80  
        \#  
        \#location ~ \\.php$ \{  
        \#    proxy\_pass   http://127.0.0.1;  
        \#\}

\# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000  
        \#  
        \#location ~ \\.php$ \{  
        \#    root           html;  
        \#    fastcgi\_pass   127.0.0.1:9000;  
        \#    fastcgi\_index  index.php;  
        \#    fastcgi\_param  SCRIPT\_FILENAME  /scripts$fastcgi\_script\_name;  
        \#    include        fastcgi\_params;  
        \#\}

\# deny access to .htaccess files, if Apache's document root  
        \# concurs with nginx's one  
        \#  
        \#location ~ /\\.ht \{  
        \#    deny  all;  
        \#\}  
    \}

\# another virtual host using mix of IP-, name-, and port-based configuration  
    \#  
    \#server \{  
    \#    listen       8000;  
    \#    listen       somename:8080;  
    \#    server\_name  somename  alias  another.alias;

\#    location / \{  
    \#        root   html;  
    \#        index  index.html index.htm;  
    \#    \}  
    \#\}

\# HTTPS server  
    \#  
    server \{  
        listen 443;  
        server\_name www.spirits.com; \# 填写绑定证书的域名  
        ssl on;  
        ssl\_certificate /usr/local/nginx/conf/server.crt;  \# 证书路径  
        ssl\_certificate\_key /usr/local/nginx/conf/server\_nopwd.key; \# 证书key  
        ssl\_session\_timeout 5m;  
        ssl\_protocols TLSv1 TLSv1.1 TLSv1.2; \#按照这个协议配置  
        ssl\_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;\#按照这个套件配置  
        ssl\_prefer\_server\_ciphers on;  
        location / \{ \# 以下蓝色做ngnix代理  
           \# root   /\#/home; \#站点目录  
           \# index  index.html index.htm;  
         proxy\_set\_header Host $host;  
         proxy\_set\_header X-Real-IP $remote\_addr;  
         proxy\_set\_header X-Forwarded-for $proxy\_add\_x\_forwarded\_for;  
         proxy\_pass http://www.spirits.com:8090;  \#真正的服务地址  
        \}  
    \}  
\}

启动ngnix，访问地址是：https://www.spirits.com

注意配置中的彩色部分配置即可，ngnix的启动、停止、重启在安装ngnix文章中有介绍，这里就不叙述了。

[https_mp.csdn.net_postedit_78408001]: https://mp.csdn.net/postedit/78408001
[20190521154004718.jpg]: /images/20220129/13f6de7297e14a68889396f580313c23.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTMxNDQyODc_size_16_color_FFFFFF_t_70]: /images/20220129/16cdb6cb3c804471bc84a669442c6fec.png