nginx配置ssl

1.安裝openssl開發環境

1. yum install openssl
2. yum install openssl-devel

 

2.生成私鑰和證書

// 1.生成私鑰
openssl genrsa -out 254.key 1024

// 2.生成CSR（證書簽名請求）
openssl req -new -key 254.key -out 254.csr

// 3.刪除密鑰中的密碼
openssl rsa -in 254.key -out 254.key

// 4.生成自簽名證書
openssl x509 -req -days 365 -in 254.csr -signkey 254.key -out 254.crt

// 5.生成pem格式的證書
openssl x509 -in server.crt -out server.pem -outform PEM

 

3. 配置ssl文件
server {
listen 443 ssl;
server_name 254.com;
ssl_certificate /etc/nginx/ssl_certs/254.pem;
ssl_certificate_key /etc/nginx/ssl_certs/254.key;
#ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

root /mnt/hgfs/project/nginx_html/;
charset utf-8;

location / {
}
}