Shulou(Shulou.com)06/01 Report--

How to Build a Free Https Website

Requirements:

A website domain name must be a registered legal domain name, and the domestic domain name has preferably passed the filing; a space, which can be a virtual space or cloud host; and a SSL Certificates.

Operation steps:

Domain name registration. Domestic and foreign GoDaddy, of course, domain name registration is required to charge a fee. space purchase. Only apply for a domain name without space website is also unable to run, the role of space is to store your website pages, databases and other data. There are many kinds of website space, virtual hosts, VPS, independent servers, etc., personal webmasters choose virtual hosts on the line, both to meet demand and reduce costs. In addition, virtual hosts only need to be managed simply through a graphical interface, while VPS and independent servers also require certain technologies, which are not suitable for novice webmasters. There are also many service providers that provide website space. It is recommended that you can apply for Alibaba Cloud, Baidu Cloud and other cloud virtual hosts that are widely used in China. The price is about 100 yuan per year.

3. Website construction. If it is a personal blog site, it is recommended to use WordPress for website construction, which is convenient and fast. You can find many related tutorials on Baidu. Enterprise websites can be developed by themselves. I will make a simple introduction below.

4. Apply for SSL Certificates. At present, there are many websites that can apply for ssl certificates in China. We suggest that you can apply for ssl certificates in the era of digital security. There are also free SSL Certificates and free SSL Certificates

Detailed installation steps:

I. Domain name resolution (here take Wanwang as an example)

Log in to Aliyun/Wanwang [Management Console], enter the domain name resolution list, point the domain name to the website host IP address (or email MX record), and quickly complete the domain name resolution setting. The specific operation process is as follows:

1. Go to the domain name resolution settings page

1)Log in Aliyun/Wanwang [Management Console], click [Products and Services]-[Cloud Resolution] at the top of the main navigation position to enter the "Domain Name Resolution List"; select the domain name to be added for resolution, click the [Resolution] entry on the right side of the operation to enter the domain name resolution setting page;

New resolution

Take the domain name pointing to your website as an example. For novice users, we support one-click resolution. You only need to fill in the IP address of the website to complete the resolution.[Reminder] Customers can enter Advanced Settings, click [Add Resolution], select Record Type A; Host Record is empty, or fill in www; Record Value Fill in the host IP address you obtained before; Resolve the line, TTL default. Click Save to complete the domain name resolution settings. New Parse Completion settings take effect immediately.

It takes 10 minutes to 2 hours to modify the resolution, and the final effect depends on the cache refresh time of local operators. Please wait patiently.

II. Website construction (taking Centos 6.5 as an example)

We use a one-click installation tool LNMP here, of course, there are other relatively simple construction tools, this can be Baidu itself.

First log in to the VPS or server using putty or similar SSH tools;

Run after login: screen -S lnmp

If the prompt screen: command not found does not exist, you can execute: yum install screen or apt-get install screen installation. For details, refer to the screen tutorial.

Download and install LNMP One-click installation package:

You can choose to use the download version (recommended in the United States and overseas VPS or small space users) or the full version (recommended for domestic VPS use, domestic users can find the domestic download address in the download), there is no difference between the two, but the full version puts some of the required source files into the installation package in advance. Install LNMP stable version

wget -c http://soft.vpser.net/lnmp/lnmp1.4.tar.gz && tar zxf lnmp1.4.tar.gz && cd lnmp1.4 && ./ install.sh lnmp

After running the above command, there will be some selection tips, which can be selected according to your detailed needs. The installation time is about ten minutes. After successful installation, you can get the following screenshot through the domain name visit, proving that your website has been successfully configured.

Request and Install SSL Certificates

You can apply for free SSL Certificates from GDCA of Digital Security Times, which can be renewed free of charge after expiration. GDCA supports binding multiple domain names, supports Certificate Status Online Query Protocol (OCSP), supports Chinese, and global browser trust. Any individual can apply for free SSL Certificates from GDCA of Digital Security Times.

login and registration

Register and log in to the GDCA website, select the type of certificate you want to apply for, fill in the domain name and relevant information, and you will be contacted later by a staff member.

Obtain SSL Certificates

After you complete the process of requesting a GDCA server certificate, GDCA will attach the server certificate to the email returned to you. With the domain name is your certificate public key file, CA certificate.crt is the intermediate certificate file.

Get Server Certificate Private Key Certificate

Please find the.key private key file generated when submitting csr before. This file is the private key of the certificate, which will be used for later configuration.

Open your public key certificate and intermediate certificate in a text editor in the following order: Public key certificate (certificate file)-intermediate certificate, paste both files into a new document, and save the file as testweb.95105813.cn.crt.:

install a server certificate

Open the nginx.conf file in the conf directory under the nginx installation directory, find the commented server configuration, and modify it:

server {

listen 443 ssl;

server_name www.yourdomian.com;

ssl on;

ssl_certificate /usr/local/nginx/conf/testweb.95105813.cn.crt; ssl_certificate_key /usr/local/nginx/conf/testweb.95105813.cn.key;

ssl_session_cache shared:SSL:1m;

ssl_session_timeout 5m;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers ECDH:AESGCM:HIGH:! RC4:! DH:! MD5:! 3DES:! aNULL:! eNULL;

ssl_prefer_server_ciphers on;

location / {

root html;

index index.html index.htm;

}

}

Save exit, reload nginx configuration nginx -s reload and access your site via https to test the installation configuration of site certificates.

The installation of SSL Certificates for the entire website is complete. Generally large and medium-sized websites, such as online banking, shopping websites, financial securities, government agencies, website recommendations to apply for a higher level of security fees certificate, such as personal blogs and other small sites can try free SSL Certificates.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.