Nginx配置SSL证书

Posted 2021-03-21 记录java路上的小问题

本文主要记录nginx怎么配置SSL证书，前提是Nginx安装成功和SSL证书已经获取。

Nginx安装略。

SSL证书获取略，可自行百度如何申请证书，挺简单的。

1.准备好证书：

2.修改nginx.config配置文件

#user nobody;worker_processes 1;
#error_log logs/error.log;#error_log logs/error.log notice;#error_log logs/error.log info;
#pid logs/nginx.pid;

events { worker_connections 1024;}

http { include mime.types; default_type application/octet-stream;
 #log_format main '$remote_addr - $remote_user [$time_local] "$request" ' # '$status $body_bytes_sent "$http_referer" ' # '"$http_user_agent" "$http_x_forwarded_for"';
 #access_log logs/access.log main;
 sendfile on; #tcp_nopush on;  #指定每个 TCP 连接最多可以保持多长时间。Nginx 的默认值是 75 秒，有些浏览器最多只 保持 60 秒，所以可以设定为 60 秒。若将它设置为 0，就禁止了 keepalive 连接 -- xcz20200611没改动 keepalive_timeout 65;
 #gzip on; client_max_body_size 50m;  server { #监听80端口 listen 80; server_name localhost;
 #charset koi8-r;
 #access_log logs/host.access.log main;
 location / { #http转https rewrite ^ https://$http_host$request_uri? permanent; #root D:/nginx-1.16.1/html/dist; #try_files $uri $uri/ /index.html; #rewrite ^.+(?<!js|css|png|map)$ /index.html break; #index index.html index.htm; }
 #error_page 404 /404.html;
 # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } }

 # another virtual host using mix of IP-, name-, and port-based configuration # #server { # listen 8000; # listen somename:8080; # server_name somename alias another.alias;
 # location / { # root html; # index index.html index.htm; # } #}

 # HTTPS server # server { listen 443 ssl; #配置域名 server_name www.*****.com; #证书文件绝对路径 ssl_certificate D://nginx-1.16.1//ssl//crt//star_*****_com.cer; #私钥文件绝对路径 ssl_certificate_key D://nginx-1.16.1//ssl//crt//PRIVATE_KEY.*****.com.key;
 ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m;
 ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on;
 location / { root D:/nginx-1.16.1/html/dist; try_files $uri $uri/ /index.html; #rewrite ^.+(?<!js|css|png|map)$ /index.html break; index index.html index.htm; }  #生产环境 反向代理到后台服务器 location /prod-api/{ client_max_body_size 50m; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header REMOTE-HOST $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; #代理转发 proxy_pass http://**.**.**.**:8888/; #后端服务器连接的超时时间_发起握手等候响应超时时间 proxy_connect_timeout 1200;  #后端服务器数据回传时间_就是在规定时间之内后端服务器必须传完所有的数据 proxy_send_timeout 1200; ##连接成功后_等候后端服务器响应时间 proxy_read_timeout 1200; }    }}

3.重启nginx后，成功：