国外免费https
生成https网址—> https://www.sslforfree.com .
网站是英文的不懂,直接用谷歌浏览器打开,如果浏览器打不开,就下载一个蓝灯(穿墙一下)就可以了。
在此网站上填写资料后,会生成两个文件。你要在服务器上,根据上边的提示建一个文件夹。把两个文件放在里边校验。
校验通过后会生给你,一个.key和.crt文件(私钥和证书)。把它传到服务器上,配置一下就可以。
nginx查看配置路径
ps aux | grep nginx
查看nginx详细路径,路径加上 -t 参数
红色部分的证书和私钥,上传到你指定的工程目录。
nginx.conf 配置文件如下:
server
{
listen 443;
server_name xxx;
index index.html index.htm index.php;
root /data/www/shoxot-api;
ssl on;
ssl_certificate /home/certificate.crt;
ssl_certificate_key /home/private.key;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
#nginx去掉index.php
location / {
#rewrite ^/$ /index.php last;
#rewrite ^/(?!index\.php|robots\.txt|uploadedImages|resource|images|js|css|styles|static)(.*)$ /index.php/$1 last;
}
location ~ ^(.+\.php)(.*)$
{
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
#fastcgi_pass unix:/dev/shm/php-cgi.sock;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_split_path_info ^(.+\.php)(.*)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
#fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
include fastcgi_params;
client_max_body_size 500m;
}
if (!-e $request_filename) {
rewrite ^/(.*)$ /index.php/$1 last;
break;
}
}
重启一下nginx(7.0版本) systemctl nginx restart