Nginx 安裝 SSL 配置 HTTPS

1、安裝基礎支持包

yum -y install openssl openssl-devel

 

2、下載nginx源碼包，並解壓

./configure --with-http_ssl_module
make
make install

3、配置

server {
    listen       443 ssl;
    # 域名，多個以空格分開
    server_name  xxx.com xxx.xxx.com;
    
    # ssl證書地址
    ssl_certificate     /usr/local/nginx/cert/ssl.pem; 
    ssl_certificate_key  /usr/local/nginx/cert/ssl.key;
    
    # ssl驗證相關配置
    ssl_session_timeout  5m;    #緩存有效期
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;    #加密算法
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    #安全鏈接可選的加密協議
    ssl_prefer_server_ciphers on;   #使用服務器端的首選算法

    location / {
        root   html;
        index  index.html index.htm;
    }
}

將 http 重定向 https。

server {
    listen       80;
    server_name  xxx.com xxx.xxx.com;
    return 301 https://$server_name$request_uri;
}

查看 nginx 是否安裝 http_ssl_module 模塊

nginx -V