Shulou(Shulou.com)06/01 Report--

In this issue, the editor will bring you about how to upgrade the personal website http to https for free. The article is rich in content and analyzes and narrates it from a professional point of view. I hope you can get something after reading this article.

Teach you 3 minutes to upgrade your personal website http to https for free

❝

As many people know, I have a personal website: www.xttblog.com, which may last longer than many people's working hours. Recently, my ssl certificate of this broken website is about to expire. Today Sunday, I hastened to upgrade it. Share this simple upgrade process.

❞

Aliyun has a free ssl certificate and hasn't operated the ssl certificate for a year. Ariyun unexpectedly hid the entry of the free certificate, causing me to submit a work order.

According to the figure above, after purchasing and applying for a certificate, you can choose to deploy the certificate. Since my server is Nginx, I will explain it here with a Nginx.

The completed certificate is shown in the following figure:

We choose to download and then download the Nginx certificate.

See this price tag? The official standard value of this SSL certificate installation and configuration skill is 120 yuan!

After the download is completed, you need to upload the certificate just downloaded to the CVM. The scp upload command is as follows:

Scp / Users/xtt/Downloads/8888888_www.xttblog_nginx.zip root@www.xttblog.com:/usr/local/nginx/conf.d/key/

After the upload is complete, we ssh connect to the server.

Ssh xttblog@www.xttblog.com

Then enter the password. Change to the / usr/local/nginx/conf.d/key/ directory.

Cd / usr/local/nginx/conf.d/key/

Unzip 8888888_www.xttblog_nginx.zip

Mv 8888888_www.xttblog.com.pem xttblog.pem

Mv 8888888_www.xttblog.com.key xttblog.key

Extract the key package required by ssl in the current directory. Then rename it (renaming is not a necessary step).

Then restart nginx. Then visit https://www.xttblog.com, full OK.

. / nginx-s reload

Since I have previously configured ssl, I do not need to change the nginx configuration file after renaming. Here is the configuration code in my nginx configuration file xttblog.conf:

Server {

Listen 80

Server_name _

Rewrite ^ (. *) $https://$host$1 permanent

}

Server {

Listen 443 ssl http2

# server_name _

Server_name www.xttblog.com

Access_log / var/log/nginx/https_access.log main

Error_log / var/log/nginx/https_error.log error

Ssl_certificate / var/local/nginx/conf.d/key/xttblog.pem

Ssl_certificate_key / var/local/nginx/conf.d/key/xttblog.key

Ssl_session_timeout 5m

Ssl_protocols TLSv1 TLSv1.1 TLSv1.2

Ssl_session_cache shared:SSL:1m

Ssl_ciphers HIGH:!aNULL:!MD5

Ssl_prefer_server_ciphers on

Fastcgi_param HTTPS on

Fastcgi_param HTTP_SCHEME https

Root / usr/share/nginx/html

Location / {

Index index.html index.htm index.jsp

Autoindex off

}

}

}

According to my configuration, you only need to change the path and pem, key files a little.

The above is the editor for you to share how to deal with the personal website http free upgrade to https, if you happen to have similar doubts, you might as well refer to the above analysis to understand. If you want to know more about it, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.