• 在已经安装的nginx上,增加ssl模块


    1. /usr/local/nginx/sbin/nginx -V 查看nginx版本与编译安装了哪些模块
    nginx version: nginx/1.10.3
    built by gcc 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC)
    built with OpenSSL 1.0.1e-fips 11 Feb 2013
    TLS SNI support enabled
    configure arguments:
    注意是V。v只显示版本号

    2. 下载nginx 1.10.3, 并且configure
    ./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module


    3. 执行make ,千万不要make install 否则会覆盖现有的nginx


    4. 关闭nginx


    5. copy  ~/download/nginx-1.10.3/objs/nginx 到现有的/usr/local/nginx/sbin/nginx


    6. /usr/local/nginx/sbin/nginx -V 查看编译安装的模块
    nginx version: nginx/1.10.3
    built by gcc 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC)
    built with OpenSSL 1.0.1e-fips 11 Feb 2013
    TLS SNI support enabled

    configure arguments: --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module

    7. 修改nginx.conf文件

    server {
      server_name xxx.yyy.com;
      listen 443;
      ssl on;
      ssl_certificate /usr/local/nginx/conf/xxx.com_server.txt; #公钥
      ssl_certificate_key /usr/local/nginx/conf/xxx.com_private.txt; #私钥

      location / {
          # location的一堆配置
          # 
          #
          # ################
      }

      error_page   500 502 503 504  /50x.html;
      location = /50x.html {
          root   html;
      }
    }
    ###########################80端口的处理###############################
    server {
      listen 80;
            server_name  xxx.yyy.com;
            send_timeout 1800;

            rewrite ^(.*)$  https://xxx.yyy.com$1 permanent; # 80端口跳转
    }

  • 相关阅读:
    Java 的Throwable、error、exception的区别
    最长回文子序列和最长回文子串
    牛客练习赛40 C-小A与欧拉路
    判断一棵树是否为二叉搜索树,完全二叉树和二叉平衡树
    Java语言的特点和特性
    设计模式
    联合索引和单列索引
    如何优化sql查询
    数据库的范式和约束
    数据库事务ACID和事务的隔离级别
  • 原文地址:https://www.cnblogs.com/felixzh/p/8316484.html
Copyright © 2020-2023  润新知