Nginx配置SSL证书

1.申请SSL证书

阿里云等云产品途径申请一年免费的

freessl.cn申请

---

2.上传证书到服务器

/../nginx/cert

---

3.配置nginx

配置443：

server {
listen 443;
server_name 域名;

ssl on;
ssl_certificate 证书;
ssl_certificate_key 密钥;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;

ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

location / {
root html;
index index.html index.htm;
}
}

配置80：

server {
listen 80;
server_name 域名;
rewrite ^(.*) https://$server_name$1 permanent;
}

---

4.重启nginx

./nginx -s reload

或者:

./nginx -s quit

/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf

---

---

常见问题：

报错[emerg] the "ssl" parameter requires ngx_http_ssl_module in /usr/local/nginx/conf/nginx.conf:69解决

1.安装OpenSSL
yum -y install openssl openssl-devel
2.在nginx安装目录下执行
./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
3.运行命令
make
4.然后备份原有已安装好的nginx
cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak
5.关闭nginx
./nginx -s stop
6.将刚刚编译好的nginx覆盖掉原有的nginx（这个时候nginx要停止状态）
cp ./objs/nginx /usr/local/nginx/sbin/
7.通过命令查看是否已经加入成功
/usr/local/nginx/sbin/nginx -V

阅读原文