- 下载、上传证书:
rz -E 3198872_www.mcl2rock.cn_nginx.zip
- 在/etc/nginx下新建文件夹cert:
mkdir -p /etc/nginx/cert
- 把证书解压到cert目录下:
unzip 3198872_www.mcl2rock.cn_nginx.zip
- 在 conf.d/ssl.conf文件里写入配置:
server {
listen 80;
listen 443 ssl;
# server_name localhost;
server_name www.mcl2rock.cn;
root /usr/share/nginx/html/public;
index index.html index.htm;
ssl_certificate "/etc/nginx/cert/3198872_www.mcl2rock.cn.pem";
ssl_certificate_key "/etc/nginx/cert/3198872_www.mcl2rock.cn.key";
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}
- 重启Nginx服务器
nginx -s reload