Step1:检查openssl安装
[root@LFS ~]# rpm -qa openssl
openssl-1.1.1c-15.el8.x86_64
Step2:创建key
[root@LFS ~]# mkdir /ssl
[root@LFS ~]# cd /ssl/
[root@LFS ssl]# openssl genrsa -out server.key 4096
Step3:生成csr请求文件
[root@LFS ssl]# openssl req -new -key server.key -out server.csr
Step4:CRT生成
[root@LFS ssl]# openssl x509 -req days 90 -in server.csr -signkeys server.key -out server.crt
Step5:启用nginx.conf文件中ssl部分
[root@LFS ssl]# vim /usr/local/nginx/etc/nginx.conf
server {
listen 443 ssl;
server_name localhost;
ssl_certificate /ssl/server.crt;
ssl_certificate_key /ssl/server.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}
Step6:重启nginx服务
[root@LFS ssl]# service nginx restart
Step7:浏览器访问测试
