nginx安装配置SSL证书实现https访问

雨点打透心脏的1/2处 2022-10-18 00:49 279阅读 0赞

1.下载证书  
阿里云为例 下载 nginx版本  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70]

## 2.将证书解压后的文件放入root下的card（没有则新建目录） ##

![在这里插入图片描述][20210604103106542.png]

## 3.cd etc/nginx/下修改nginx.conf ##

443端口  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70 1]  
代理端口  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70 2]

http {
        include       mime.types;
        default_type  application/octet-stream;
        sendfile        on;
        keepalive_timeout  65;
      server {
      #监听443端口
        listen 443;
        #你的域名
        server_name yssy.cloud; 
        ssl on;
        #ssl证书的pem文件路径
        ssl_certificate  /root/card/yssy.cloud.pem;
        #ssl证书的key文件路径
        ssl_certificate_key /root/card/yssy.cloud.key;
        location / {
         proxy_pass  http://公网地址:项目端口号;
        }
    }
    server {
        listen 8082;
        server_name yssy.cloud;
        #将请求转成https
        rewrite ^(.*)$ https://$host$1 permanent;
    }
    }

## 4.重启nginx ##

进入sbin目录下

./nginx -s reload
    ./nginx -s stop
    ./nginx

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70]: /images/20221014/e0615c2ad35f44e091683f4a95cfd212.png
[20210604103106542.png]: /images/20221014/dd8b426879ce412d9e942dafa3fa0fe9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70 1]: /images/20221014/7b5e163c182a4c5693daac996a337729.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQwNjE4NjY0_size_16_color_FFFFFF_t_70 2]: /images/20221014/1bae92f20fd641cf9c3848eb6de5bd56.png