Nginx配置SSL证书

1.申请SSL证书

阿里云等云产品途径申请一年免费的

freessl.cn申请

---

2.上传证书到服务器

/../nginx/cert

---

3.配置nginx

配置443：

server {
	listen     443;
	server_name  域名;

	ssl on;
	ssl_certificate  证书;
	ssl_certificate_key  密钥;
	ssl_session_cache    shared:SSL:1m;
	ssl_session_timeout  5m;

	ssl_ciphers  HIGH:!aNULL:!MD5;
	ssl_prefer_server_ciphers  on;

	location / {
		root   html;
		index  index.html index.htm;
	}
}

配置80：

server {
	listen 80;
	server_name 域名;
	rewrite ^(.*) https://$server_name$1 permanent;
}

---

4.重启nginx

./nginx -s reload

或者:

./nginx -s quit

/usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf

---

---

常见问题：

报错[emerg] the "ssl" parameter requires ngx_http_ssl_module in /usr/local/nginx/conf/nginx.conf:69解决

1.安装OpenSSL
yum -y install openssl openssl-devel
2.在nginx安装目录下执行
./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
3.运行命令
make
4.然后备份原有已安装好的nginx
cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak
5.关闭nginx
./nginx -s stop
6.将刚刚编译好的nginx覆盖掉原有的nginx（这个时候nginx要停止状态）
cp ./objs/nginx /usr/local/nginx/sbin/
7.通过命令查看是否已经加入成功
 /usr/local/nginx/sbin/nginx -V

阅读原文