如何禁止IP直接訪問HTTPS
nginx里如下設置:
server {
listen 80;
listen 443 ssl spdy;
root /data0/web/domain.com;
server_name domain.com *.domain.com;
index index.html index.htm index.php;
location / {
}
}
##default
server {
listen 80 default;
listen 443 default;
server_name _;
root /data0/web/empty;
location / {
return 500;
}
}
如上設置,訪問https://ip。SSL無法工作。即便訪問https://domain.com也無法訪問。
閉關修行中......
server
{
listen 443 ssl default_server;
ssl_certificate path_to_your_fullchain.cer;
ssl_certificate_key paht_to_your_key;
return 301 https://demo.com;
}
一定要配置 ssl 證書,要不然不起作用