Nginx服务器 配置 https

参考 这里

1. 购买证书

2. 补全信息

3. 下载证书( .pem + .key )

4. 上传至服务器  /usr/local/nginx/conf/cert 下

5. 修改 nginx.conf :

server {
    listen       80;
    root /www/path/to/root;                     // root
    server_name www.mysite.com www.mysite.com;  // 你的域名*2
    index  index.html index.php index.htm;
    error_page  400 /errpage/400.html;
    error_page  403 /errpage/403.html;
    error_page  404 /errpage/404.html;
    error_page  405 /errpage/405.html;
    error_page  503 /errpage/503.html;
    location ~ \.php$ {
            proxy_pass http://127.0.0.1:8888;   // 你的服务器地址
            include naproxy.conf;
    }
    location ~ /\.ht {
            deny  all;
    }
    location / {
            try_files $uri @apache;
    }
    location @apache {
             internal;
             proxy_pass http://127.0.0.1:8888;  // 你的服务器地址
             include naproxy.conf;
    }
}
server {
    listen 443;
    server_name www.mysite.com www.mysite.com;  // 你的域名*2
    ssl on;
    root html;
    index index.html index.htm;
    ssl_certificate   cert/pemfile.pem;         // .pem路径
    ssl_certificate_key  cert/keyfile.key;      // .key路径
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location ~ \.php$ {
            proxy_pass http://127.0.0.1:8888;   // 你的服务器地址
            include naproxy.conf;
    }
    location ~ /\.ht {
            deny  all;
    }
    location / {
            try_files $uri @apache;
    }
    location @apache {
             internal;
             proxy_pass http://127.0.0.1:8888;  // 你的服务器地址
             include naproxy.conf;
    }
}

　　

6. 重启Nginx

7. 访问 https://www.yoursite.com

1