Nginx配置ssl证书

Posted 2020-12-16 直角漫步

1. 下载、上传证书：

rz -E 3198872_www.mcl2rock.cn_nginx.zip

2. 在/etc/nginx下新建文件夹cert:

mkdir -p /etc/nginx/cert

3. 把证书解压到cert目录下：

unzip 3198872_www.mcl2rock.cn_nginx.zip

4. 在 conf.d/ssl.conf文件里写入配置：

server {
    listen  80;
    listen  443 ssl;   
    # server_name localhost;
    server_name  www.mcl2rock.cn;
    root  /usr/share/nginx/html/public;
    index index.html index.htm;
    ssl_certificate "/etc/nginx/cert/3198872_www.mcl2rock.cn.pem";
    ssl_certificate_key "/etc/nginx/cert/3198872_www.mcl2rock.cn.key";
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;   
    location / {
        root html;
        index index.html index.htm;   
    }

} 

5. 重启Nginx服务器

nginx -s reload