ssl证书
xp 2019-11-21 ssl
到你需要生成证书的目录下
生成一个key
openssl genrsa -des3 -out xxx.key 1024 随便设置密码
openssl rsa -in xxx.key -out xxx.key 去除密码
- 生成服务端证书
openssl req -new -key xxx.key -out xxx.csr
- 生成证书
openssl x509 -req -days 3650 -in xxx.csr -signkey xxx.key -out xxx.crt
- nginx配置
server{
listen 443; # 一定要是443
ssl on;
ssl_certificate /etc/nginx/ssl/xxx.crt;
ssl_certificate_key /etc/nginx/ssl/xxx.key;
}
server {
listen 80;
server_name www.xxx.com;
rewrite ^(.*)$ https://$host$1 permanent;
}
1
2
3
4
5
6
7
8
9
10
11
12
2
3
4
5
6
7
8
9
10
11
12
- 重启nginx