Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Nginx ssl certificate configuration

2025-02-25 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Share

Shulou(Shulou.com)06/03 Report--

1. Installation and configuration of Nginx

Install pcre # cd / usr/local/src # yum-y install make zlib zlib-devel gcc-c++ libtool openssl openssl-devel # wget http://downloads.sourceforge.net/project/pcre/pcre/8.35/pcre-8.35.tar.gz # tar zxvf pcre-8.35.tar.gz # cd pcre-8.35 #. / configure # make & & make install install nginx # wget http://nginx.org/download/nginx-1.13.0.tar.gz # tar zxvf Nginx-1.13.0.tar.gz #. / configure-- prefix=/usr/local/nginx-- with-http_stub_status_module-- with-http_ssl_module-- with-pcre=/usr/local/src/pcre-8.35 # make & & make install creates the user under which Nginx runs www: # groupadd www # useradd-g www www

Configure nginx.conf to replace / usr/local/nginx/conf/nginx.conf with the following

[root@bogon conf] # cat / usr/local/nginx/conf/nginx.confuser www www;worker_processes 2; # setting value and number of CPU cores are the same error_log / usr/local/webserver/nginx/logs/nginx_error.log crit; # log location and log level pid / usr/local/webserver/nginx/nginx.pid;#Specifies the value for maximum file descriptors that can be opened by this process.worker_rlimit_nofile 65535 words events {use epoll; worker_connections 65535;} http {include mime.types Default_type application/octet-stream; log_format main'$remote_addr-$remote_user [$time_local] "$request"'$status $body_bytes_sent "$http_referer"'"$http_user_agent" $http_x_forwarded_for'; # charset gb2312; server_names_hash_bucket_size 128; client_header_buffer_size 32k; large_client_header_buffers 4 32k; client_max_body_size 8m Sendfile on; tcp_nopush on; keepalive_timeout 60; tcp_nodelay on; fastcgi_connect_timeout 300; fastcgi_send_timeout 300; fastcgi_read_timeout 300; fastcgi_buffer_size 64k; fastcgi_buffers 4 64k; fastcgi_busy_buffers_size 128k; fastcgi_temp_file_write_size 128k; gzip on; gzip_min_length 1k; gzip_buffers 4 16k; gzip_http_version 1.0; gzip_comp_level 2 Gzip_types text/plain application/x-javascript text/css application/xml; gzip_vary on; # limit_zone crawler $binary_remote_addr 10m; # the following is the configuration of the server virtual host server {listen 80th # listening port server_name localhost;# domain name index index.html index.htm index.php; root / usr/local/nginx/html # site directory location ~. *\. (php | php5)? ${# fastcgi_pass unix:/tmp/php-cgi.sock; fastcgi_pass 127.0.0.1 php5 9000; fastcgi_index index.php; include fastcgi.conf;} location ~. *\. (gif | jpg | jpeg | png | swf | ico) ${expires 30d; # access_log off;} location ~. *\. (js | css)? ${expires 15d # access_log off;} access_log off;}} Nginx other commands

Here are a few commands commonly used by Nginx:

# / usr/local/nginx/sbin/nginx-t # Test the correctness of nginx configuration # / usr/local/nginx/sbin/nginx # launch Nginx#/usr/local/nginx/sbin/nginx-s reload # reload configuration file # / usr/local/nginx/sbin/nginx-s reopen # restart Nginx#/usr/local/nginx/ Sbin/nginx-s stop # stop Nginx

2. Installation and configuration of Nginx SSl

# yum install openssl- y#yum install openssl-devel-y#cd / usr/local/nginx/ssl#openssl genrsa-des3-out server.key 1024#openssl req-new-key server.key-out server.csr#openssl rsa-in server.key-out server_nopwd.key#openssl x509-req-days 365-in server.csr-signkey server_nopwd.key-out server.crt after completing the above, we will get the following file in the directory # lsserver.crt server.csr server.key server_nopwd.key edit nginx configuration file Add the following statement # vi nginx.conf server {listen 80 Listen 443 ssl; # Open ssl server_name localhost; ssl_certificate ssl/server.crt; # Certificate configuration ssl_certificate_key ssl/server_nopwd.key; # Certificate configuration. . } restart nginx and it will take effect

Verification

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Servers

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report