安装nginx，配置https

cvsea2023-10-14 11:09

nginx安装

上传到/opt目录

解压nginx，并进入解压后到目录

bash 复制代码

cd /opt
tar -zxvf nginx-1.25.2.tar.gz
cd nginx-1.25.2

编译(with-http_ssl_module为https模块)

bash 复制代码

./configure --with-http_ssl_module

安装

bash 复制代码

make install

默认的安装目录为：/usr/local/nginx

启动Nginx

bash 复制代码

./nginx

重启Nginx

bash 复制代码

./nginx -s reload

关闭Nginx

bash 复制代码

./nginx -s stop

生成https自签名证书，如果是公网域名，可以申请阿里云免费证书

bash 复制代码

mkdir /usr/local/nginx/cert
cd /usr/local/nginx/cert

生成私钥

bash 复制代码

openssl genrsa -out server.key 2048

生成公钥

bash 复制代码

openssl req -new -key server.key -out server.csr

生成证书

bash 复制代码

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

配置nginx https

bash 复制代码

vim /usr/local/nginx/conf/nginx.conf

添加以下内容

bash 复制代码

server {
        listen       443 ssl;
        server_name  localhost;

		# https证书
        ssl_certificate      /usr/local/nginx/cert/server.crt;
        ssl_certificate_key  /usr/local/nginx/cert/server.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
        # 代理地址
        location / {
           proxy_pass http://localhost:8848/;
        }
 }