如果有防火墻的話,記得開通443端口
準(zhǔn)備材料:
1.申請ssl證書,這個如何申請可以到百度搜一下,因為域名服務(wù)商不同,這里不做過多贅述;
2.服務(wù)器上已安裝nginx,并可以正常訪問。
開始配置:
1.進入到nginx目錄,查看有沒有http_ssl_module模塊
./nginx -V
2.如果沒有,找到源碼,輸入以下命令進行安裝(如果有,跳轉(zhuǎn)到第6步)
#prefix后面的路徑是你安裝nginx的路徑 ./configure --prefix=/usr/local/nginx --with-http_ssl_module
3.configure執(zhí)行完成后,輸入make,注意:千萬不要make install,這樣會覆蓋原有的配置
4.make完成后,停止nginx服務(wù),進入objs目錄,將nginx啟動程序,拷貝到安裝目錄下,替換原有的啟動程序
5.啟動nginx,輸入./nginx -V,查看是否安裝成功
6.新建一個目錄cert,把申請下來的證書上傳上去
7.打開配置文件nginx.conf,加入以下配置
http{ server{ listen 443 ssl; #對應(yīng)你的域名 server_name test.com; ssl_certificate /usr/local/nginx/cert/ssl.crt; ssl_certificate_key /usr/local/nginx/cert/ssl.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; #如果是靜態(tài)文件,直接指向目錄,如果是動態(tài)應(yīng)用,用proxy_pass轉(zhuǎn)發(fā)一下 location / { root /usr/local/service/ROOT; index index.html; } } #監(jiān)聽80端口,并重定向到443 server{ listen 80; server_name test.com; rewrite ^/(.*)$ https://test.com:443/$1 permanent; } }
8.重啟nginx
./nginx -s reload
如果重啟的時候提示rewrite錯誤,說明你的nginx沒有安裝rewrite模塊,很不幸,照著2,3,4,5步回去重新配一下nginx
The above is the detailed content of How to configure Nginx ssl certificate. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

NGINX is more suitable for handling high concurrent connections, while Apache is more suitable for scenarios where complex configurations and module extensions are required. 1.NGINX is known for its high performance and low resource consumption, and is suitable for high concurrency. 2.Apache is known for its stability and rich module extensions, which are suitable for complex configuration needs.

NGINX and Apache each have their own advantages and disadvantages, and the choice should be based on specific needs. 1.NGINX is suitable for high concurrency scenarios because of its asynchronous non-blocking architecture. 2. Apache is suitable for low-concurrency scenarios that require complex configurations, because of its modular design.

PHP code can be executed in many ways: 1. Use the command line to directly enter the "php file name" to execute the script; 2. Put the file into the document root directory and access it through the browser through the web server; 3. Run it in the IDE and use the built-in debugging tool; 4. Use the online PHP sandbox or code execution platform for testing.

Understanding Nginx's configuration file path and initial settings is very important because it is the first step in optimizing and managing a web server. 1) The configuration file path is usually /etc/nginx/nginx.conf. The syntax can be found and tested using the nginx-t command. 2) The initial settings include global settings (such as user, worker_processes) and HTTP settings (such as include, log_format). These settings allow customization and extension according to requirements. Incorrect configuration may lead to performance issues and security vulnerabilities.

Linux system restricts user resources through the ulimit command to prevent excessive use of resources. 1.ulimit is a built-in shell command that can limit the number of file descriptors (-n), memory size (-v), thread count (-u), etc., which are divided into soft limit (current effective value) and hard limit (maximum upper limit). 2. Use the ulimit command directly for temporary modification, such as ulimit-n2048, but it is only valid for the current session. 3. For permanent effect, you need to modify /etc/security/limits.conf and PAM configuration files, and add sessionrequiredpam_limits.so. 4. The systemd service needs to set Lim in the unit file

When configuring Nginx on Debian system, the following are some practical tips: The basic structure of the configuration file global settings: Define behavioral parameters that affect the entire Nginx service, such as the number of worker threads and the permissions of running users. Event handling part: Deciding how Nginx deals with network connections is a key configuration for improving performance. HTTP service part: contains a large number of settings related to HTTP service, and can embed multiple servers and location blocks. Core configuration options worker_connections: Define the maximum number of connections that each worker thread can handle, usually set to 1024. multi_accept: Activate the multi-connection reception mode and enhance the ability of concurrent processing. s

NGINXserveswebcontentandactsasareverseproxy,loadbalancer,andmore.1)ItefficientlyservesstaticcontentlikeHTMLandimages.2)Itfunctionsasareverseproxyandloadbalancer,distributingtrafficacrossservers.3)NGINXenhancesperformancethroughcaching.4)Itofferssecur

Diagnosis and solutions for common errors of Nginx include: 1. View log files, 2. Adjust configuration files, 3. Optimize performance. By analyzing logs, adjusting timeout settings and optimizing cache and load balancing, errors such as 404, 502, 504 can be effectively resolved to improve website stability and performance.
