Shulou(Shulou.com)06/02 Report--

Installation

Basic package

Ububtuapt-get install build-essentialapt-get install libtoolcentosyum-y install gcc automake autoconf libtool makeyum install gcc gcc-c++

Enter the installation directory

Cd / usr/local/src

Install PCRE support regular expression to make Nginx support Rewrite function

Wget ftp://ftp.csx.cam.ac.uk/pub/software/programming/pcre/pcre-8.42.tar.gztar-zxvf pcre-8.42.tar.gzcd pcre-8.42./configuremakemake install

Install zlib to support data compression

Wget http://zlib.net/zlib-1.2.11.tar.gztar-zxvf zlib-1.2.11.tar.gzcd zlib-1.2.11./configuremakemake install

Install openssl to support https

Wget https://www.openssl.org/source/openssl-1.1.1-pre7.tar.gztar-zxvf openssl-1.1.1-pre7.tar.gzcd openssl-1.1.1-pre7./configuremakemake install

Nginx

Wget http://nginx.org/download/nginx-1.14.0.tar.gztar-zxvf nginx-1.14.0.tar.gzcd nginx-1.14.0./configure-prefix=/usr/local/nginx-with-http_stub_status_module-with-http_ssl_modulemakemake install

Configuration

Profile address

/ usr/local/nginx/conf/nginx.conf

Use

Command

/ usr/local/nginx/sbin/nginx # start Nginx/usr/local/nginx/sbin/nginx-t # check the correctness of Nginx configuration file / usr/local/nginx/sbin/nginx-s reload # reload configuration file / usr/local/nginx/sbin/nginx-s reopen # restart Nginx/usr/local/nginx/sbin/nginx-s stop # stop Nginx

Process shutdown

# check process number ps-ef | grep nginx# normally exits kill-QUIT process number # Quick stop kill-TERM process number kill-INT process number # forcibly exit kill-KILL nginx to generate cer certificate support https to generate cer certificate # enter the directory where the certificate is stored / usr/local/nginx/conf/ssl# create server certificate key file server.key private key openssl genrsa-des3-out server.key 102 enter the password and confirm the password The output content is as follows: # Enter pass phrase for root.key: ← enter the previously created password # Country Name (2 letter code) [AU]: CN ← country code, and China enter CN# State or Province Name (full name) [Some-State]: BeiJing ← province full name Pinyin # Locality Name (eg, city) []: full name of BeiJing ←, Pinyin # Organization Name (eg, company) [Internet Widgits Pty Ltd]: MyCompany Corp. ← Company English name # Organizational Unit Name (eg, section) []: ← can not enter # Common Name (eg, YOUR name) []: ← does not enter # Email Address []: admin@mycompany.com ← email at this time Feel free to enter # Please enter the following 'extra' attributes# to be sent with your certificate request# A challenge password []: ← can not enter # An optional company name []: ← can not enter # backup server key file cp server.key server.key.org# remove file password Generate the public key openssl rsa-in server.key.org-out server.key# Enter pass phrase for server.key.org: ← enter the password created earlier # generate the certificate file server.crtopenssl x509-req-days 365-in server.csr-signkey server.key-out server.crt

Configure https

# / usr/local/nginx/conf/nginx.conf## HTTPS server configuration#server {listen 443 ssl; # ssl Port server_name www.xingkongbj.com xingkongbj.com; # Domain name ssl on; # Open ssl ssl_certificate ssl/server.crt; ssl_certificate_key ssl/server.key; ssl_session_timeout 5m exp # ssl_prefer_server_ciphers on; location / {proxy_redirect off; # prohibit jumping to proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://98.142.138.177/; }} # nginx: [emerg] the "ssl" parameter requires ngx_http_ssl_module in / usr/local/nginx/conf/nginx.conf# is due to lack of http_ssl_module module in nginx Compile and install with-with-http_ssl_module configuration # switch to nginx source package cd cd / usr/local/src/nginx-1.14.0/# to view ngixn original module / usr/local/nginx/sbin/nginx-V# reconfiguration. / configure-- prefix=/usr/local/nginx-- with-http_stub_status_module-- with-http_ssl_module# recompile without make install installation. Otherwise, the make# backup will overwrite the already installed nginxcp / usr/local/nginx/sbin/nginx / usr/local/nginx/sbin/nginx.bakcp / usr/local/nginx/conf/nginx.conf / usr/local/nginx.conf# and the newly compiled nginx will overwrite the original nginx (ngixn must be stopped) cp. / objs/nginx / usr/local/nginx/sbin/ # at this time, you will be prompted whether to overwrite, please enter yes Direct enter is not overridden by default # start nginx, check the nginx module, and find that / usr/local/nginx/sbin/nginx-V/usr/local/nginx/sbin/nginx-t/usr/local/nginx/sbin/nginx has been added

Summary

The above is the editor to introduce to you the method of Nginx from building to configuring to support HTTPS. I hope it will be helpful to you. If you have any questions, please leave me a message and the editor will reply to you in time. Thank you very much for your support to the website!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.