In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-01-18 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Internet Technology >
Share
Shulou(Shulou.com)05/31 Report--
This article mainly introduces "how to enable the configuration of SSL in the Nginx server". In the daily operation, I believe that many people have doubts about how to enable the configuration of SSL in the Nginx server. The editor consulted all kinds of materials and sorted out simple and easy-to-use methods of operation. I hope it will be helpful to answer the doubts of "how to enable the configuration of SSL in the Nginx server". Next, please follow the editor to study!
Generate a certificate
You can generate a simple certificate by following these steps:
First, go to the directory where you want to create the certificate and private key, for example:
$cd / usr/local/nginx/conf
Create the server private key, and the command will ask you to enter a password:
$openssl genrsa-des3-out server.key 1024
Create the certificate to sign the request (csr):
$openssl req-new-key server.key-out server.csr
Remove the necessary passwords when loading nginx supported by ssl and using the private key above:
$cp server.key server.key.org$ openssl rsa-in server.key.org-out server.key
Enable one ssl virtual host
Write in the nginx.conf configuration file:
Server {listen 443; server_name example.com; root / apps/www; index index.html index.htm; ssl on; ssl_certificate / etc/nginx/ssl/nginx.crt; ssl_certificate_key / etc/nginx/ssl/nginx.key;# ssl_protocols sslv3 tlsv1 tlsv1.1 tlsv1.2;# ssl_ciphers all rips export56 RC4RSARSAR highlands; mediumRSAR lowrigsslv2veExport # ssl_prefer_server_ciphers on;}
Where ssl_certificate represents the ca file and ssl_certificate_key represents the key file.
If you want to force the http request to https, you can do this:
This is the end of the study on "how to enable the configuration of SSL in the Nginx server" for server {listen 80 server name example.me;return 301 https://$server_name$request_uri;}. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 0
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
Http://blog.csdn.net/tumuzhuanjia/article/details/39555445
© 2024 shulou.com SLNews company. All rights reserved.