Nginx监听443端口配置SSL证书

1.先去宝塔：https://www.bt.cn/申请一个免费SSL证书：



2.点支付订单后，还须要再列表 验证域名，验证域名须要在本身的域名解析配置txt类型字符串值以下，解析值在宝塔SSL申请列表详情能够看到：

3.验证成功后，在SSL申请列表下载证书：

4.下载后是一个压缩包，压缩包里会有各类服务器配置须要的证书


5.SSL免费证书申请好了，那么我就来看看nginx监听443端口配置SSL证书吧
若是还没安装nginx请看我另一篇博文安装nginx教程： https://blog.csdn.net/lc8023xq/article/details/107430072

nginx配置：

http { include mime.types; default_type application/octet-stream; gzip on; gzip_min_length 1024; gzip_types text/css application/x-javascript application/vnd.api+json; gzip_disable "MSIE [1-6]\."; gzip_comp_level 2;

 #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"';

 #access_log logs/access.log main;

 sendfile on; #tcp_nopush on;

 #keepalive_timeout 0; keepalive_timeout 65;

 #gzip on; server { listen 443 ssl; server_name javakfz.com; root /home/www/discuz/public; index index.php; #ssl on; ssl_certificate /opt/install/Nginx_SSL/1_javakfz.com_bundle.pem; ssl_certificate_key /opt/install/Nginx_SSL/0_javakfz.com.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; #charset koi8-r;

 #access_log logs/host.access.log main;

 #location / { # try_files $uri $uri/ /index.php?$query_string; #} location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /home/www/discuz/public$fastcgi_script_name; }

 #error_page 404 /404.html;

 # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; }  } #配置80端口重定向443端口 server { listen 80; server_name javakfz.com; rewrite ^(.*)$ https://${server_name}$1 permanent;

 }}

6.若是在Nginx配置好SSL相关配置以后报错:
检查配置：/usr/local/nginx/sbin/nginx
报错:nginx: [emerg] unknown directive “ssl” in /usr/local/nginx/conf/nginx.conf:26

以上说明没有安装SSL模块，那么咱们须要从新安装相关模块
1.在nginx的安装目录执行
./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
2.在nginx的安装目录执行
make

7.最后
/usr/local/nginx/sbin/nginx -s reload # 从新载入配置文件
/usr/local/nginx/sbin/nginx -s reopen # 重启 Nginx

I do not know where to go,

but I have been on the road. 

我不知道将去何方，但我已在路上

点亮 ，告诉你们你也在看

本文分享自微信公众号 - JAVA开发者课堂（leechence）。
若有侵权，请联系 support@oschina.cn 删除。
本文参与“OSC源创计划”，欢迎正在阅读的你也加入，一块儿分享。