Nginx如何配置ssl实现https(https,nginx,ssl,开发技术)

一、安装 Nginx ssl 模块

1.检查

检查是否已安装 ssl 模块：

cd/usr/local/nginx/sbin./nginx-V

[root@server-c00ef8c3-710d-4708-9cde-2c864e7c03e2sbin]#./nginx-Vnginxversion:nginx/1.21.4builtbygcc4.8.520150623(RedHat4.8.5-44)(GCC)configurearguments:--prefix=/usr/local/nginx

如果没出现 configure arguments: --with-http_ssl_module 说明没有安装。

2.安装

cd/usr/local/nginx-1.21.4./configure--prefix=/usr/local/nginx--with-http_ssl_modulemakecp./objs/nginx/usr/local/nginx/sbin/

3.再次检查

再次检查是否已安装 ssl 模块：

cd/usr/local/nginx/sbin./nginx-V

[root@server-c00ef8c3-710d-4708-9cde-2c864e7c03e2sbin]#./nginx-Vnginxversion:nginx/1.21.4builtbygcc4.8.520150623(RedHat4.8.5-44)(GCC)builtwithOpenSSL1.0.2k-fips26Jan2017TLSSNIsupportenabledconfigurearguments:--prefix=/usr/local/nginx--with-http_ssl_module

二、部署 ssl 证书

将申请好的 ssl 证书拷贝至 cert 目录下：

三、配置 nginx.conf

cd/usr/local/nginx/confvinginx.conf

新增 https server 配置：

#管理端httpsserver{listen443ssl;server_nameadmin-xxxxx.xxx.xxx;ssl_certificate../cert/server.crt;ssl_certificate_key../cert/server.key;ssl_session_timeout5m;ssl_protocolsTLSv1TLSv1.1TLSv1.2;ssl_ciphersECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;ssl_prefer_server_cipherson;location/{proxy_set_headerX-Real-IP$remote_addr;proxy_set_headerHost$http_host;proxy_passhttp://localhost:10003;}}

四、重启 Nginx

/usr/local/nginx/sbin/nginx-sreload

或

ps-ef|grepnginxkillxxx/usr/local/nginx/sbin/nginx

补充：如果 80 端口被占用，用kill [id]来结束进程：

#查看端口使用$netstat-lntp

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:80 0.0.0.0: LISTEN 21307/nginx: master

tcp 0 0 0.0.0.0:22 0.0.0.0: LISTEN 3072/sshd

tcp 0 0 0.0.0.0:443 0.0.0.0???? LISTEN 21307/nginx: master

# 结束 80 端口进程

$ kill 21307

再次重启 nginx ：

$/usr/local/nginx/sbin/nginx-c/usr/local/nginx/conf/nginx.conf