nginx多域名、多證書

環境：

一台nginx服務器 192.168.10.251

兩台windowsserver2012 IIS服務器 （192.168.10.252、192.168.10.253）

從阿里雲上下載ssl證書並上傳到nginx服務器

nginx配置文件 添加證書

upstream test_1.com {
       # ip_hash;
               server 192.168.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
               server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
                       }
server {
   listen 443;
    #access_log  logs/access.log  ;
       server_name test_1.com;         
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_1.pem; ssl_certificate_key /usr/local/nginx/cert/test_1.key;                
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;                                      
   location / {
       root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_1.com;
          client_max_body_size 50m;
                 }
     }
upstream test_2.com {
       # ip_hash;
               server 122.226.10.252:80 weight=1 max_fails=2 fail_timeout=12s;
               server 122.226.10.253:80 weight=1 max_fails=2 fail_timeout=12s;
                       }
server {
   listen 443;
        #access_log  logs/access.log  ;
       server_name  test_2.com;        
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_2.pem; ssl_certificate_key /usr/local/nginx/cert/test_2.key;
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;
   location / {
           root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_2.com;
          client_max_body_size 50m;
                 }
     }
}

 

參考：

https://blog.csdn.net/fragrant_no1/article/details/83785882
https://www.cnblogs.com/beyang/p/7718463.html
https://blog.csdn.net/weixin_38187317/article/details/81670073
https://www.cnblogs.com/beyang/p/7718463.html