Shulou(Shulou.com)06/01 Report--

Installation of SSL certificate under Winows+Nginx

one。 Prepare before installing the certificate

(1) be sure to back up the server configuration files you need to modify before installing the certificate

(2) Certificate files needed: 1_root_bundle.crt, 2_domainname.com.key

Note: all three certificate files are in the folder for Nginx.zip, where 1_root_bundle.crt is the root certificate chain (public key) and 2 _ domainname.com.key is the private key. (among them: certificate public key and private key files are generally named after your domain name; certificate suffix names crt and cer are of the same nature).

II. Installation certificate

1. Configure SSL certificates

(1) copy the 1_root_bundle.crt and 2_domainname.com.key files to the conf directory under the Nginx installation directory.

(2) Open the nginx.conf file in the conf directory under the Nginx installation directory and find:

Modify it to:

Note: after the completion of the configuration, the website path and default page should be consistent with port 80.

Save the exit and restart Nginx.

Visit your site through https to test the installation and configuration of the site certificate.

two。 Local test access.

If you are testing locally, please do local resolution access: open the C:\ Windows\ System32\ Drivers\ etc\ hosts file and modify it with a text editor to resolve the domain name bound to the certificate to the local ip.

3. After completing the configuration.

Start nginx to access the domain name bound to the https://+ certificate

Note: if the website cannot be accessed normally through https after deployment, you can confirm whether the server port 443 is open or blocked by acceleration tools such as website guardians.

(1) Open method: firewall setting-exception port-add port 443 (TCP).

(2) if intercepted by security or acceleration tools, you can add 443 to the trust list in the intercept record.

After rebooting, access via https again.

IV. Backup of SSl certificate

Please save the received certificate package file and password in case you lose it.

Global trusted CA institutions

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.