网站转为https协议，苹果商店应用转为https协议总结

 log_format  www.44755.com  '$remote_addr - $remote_user [$time_local] "$request" '             '$status $body_bytes_sent "$http_referer" '
              '"$http_user_agent" $http_x_forwarded_for';
 server
         {
                 listen       80;
                 listen      443 ssl;
                 server_name www.44755.com;
                 index index.html index.htm index.php default.html default.htm default.php;
                 root  /data/www/44755;
                 #include cindex.conf;

                 location ~ \.git
                 {
                         deny all;
                 }

                 location / {
                         if (!-e $request_filename){
                                 rewrite (.*) /index.php;
                         }
                 }

                 location ~ ^/bbs/.*\.(php|php5)?$
                 {
                         root /data/www;

                         #try_files $uri =404;
                         #fastcgi_pass  unix:/tmp/php-cgi.sock;
                         fastcgi_pass 127.0.0.1:9000;
                         fastcgi_index index.php;
                         include fastcgi.conf;
                 }
              '$status $body_bytes_sent "$http_referer" '
              '"$http_user_agent" $http_x_forwarded_for';
 server
         {
                 listen       80;
                 listen      443 ssl;
                 server_name www.44755.com;
                 index index.html index.htm index.php default.html default.htm default.php;
                 root  /data/www/44755;
                 #include cindex.conf;

                 location ~ \.git
                 {
                         deny all;
                 }

                 location / {
                         if (!-e $request_filename){
                                 rewrite (.*) /index.php;
                         }
                 }

                 location ~ ^/bbs/.*\.(php|php5)?$
                 {
                         root /data/www;

                         #try_files $uri =404;
                         #fastcgi_pass  unix:/tmp/php-cgi.sock;
                         fastcgi_pass 127.0.0.1:9000;
                         fastcgi_index index.php;
                         include fastcgi.conf;
                 }
                 location ~ ^/bbs/.*\.(php|php5)?$
                 {
                         root /data/www;
                         #try_files $uri =404;
                         #fastcgi_pass  unix:/tmp/php-cgi.sock;
                         fastcgi_pass 127.0.0.1:9000;
                         fastcgi_index index.php;
                         include fastcgi.conf;
                 }
                 location ~ ^/bbs {
                         root /data/www;
                 }
                 location ~ .*\.(php|php5)?$
                         {
                                 #try_files $uri =404;
                                 #fastcgi_pass  unix:/tmp/php-cgi.sock;
                                 fastcgi_pass 127.0.0.1:9000;
                                 fastcgi_index index.php;
                                 include fastcgi.conf;
                         }
                 location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
                         {
                                 expires      30s;
                         }
                 location ~ .*\.(js|css)?$
                         {
                                 expires      12s;
                         }
                 ssl_certificate /usr/local/nginx/conf/sslkey/1_www.44755.com_bundle.crt;
         ssl_certificate_key /usr/local/nginx/conf/sslkey/2_www.44755.com.key;
         ssl_session_timeout 5m;
         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
         ssl_prefer_server_ciphers on;
                 #access_log  /data/logs/www.44755.com.log  www.44755.com;
                 access_log off;
                 error_log   /data/logs/solo.44755.com.err.log;
         }

这个是域名的配置文件。

 

nginx配置http和https共存 的方法：

 server {
 listen 80;
 listen 443 ssl;
 server_name test.xx.com;
 index index.html index.htm index.php;
 root /usr/local/default;
 location ~ .*\.(php|php5)?$
 {
 #fastcgi_pass unix:/tmp/php-cgi.sock;
 fastcgi_pass 127.0.0.1:9000;
 fastcgi_index index.php;
 include fastcgi.conf;
 }
 location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
 {
 #expires 30d;
 }
 location ~ .*\.(js|css)?$
 {
 #expires 1h;
 }

 access_log logs/test.access.log;
 ssl_certificate /x.com_bundle.crt;
 ssl_certificate_key /x.com.key;
 ssl_session_timeout 5m;
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
 ssl_prefer_server_ciphers on;
 }

一定要注意，如果是用的Nginx服务器，如果访问http可以，访问https出现403错误的话，需要查看一下是否配置错文件，对于多域名配置需要去vhost文件家里面的对应域名中配置站点的端口号：

/usr/local/nginx/conf/vhost，不要去/usr/local/nginx/conf/下面的nginx.conf

 

如果还有问题记得开启php.ini中的openssl扩展

 

 

nginx配置单向和双向认证

上面主要是完成了单向认证，如果还想服务端来验证客户端的证书是否正常，那还的生成客户端证书，也就是自签名了，这里不写自签名证书怎么做，网上一大堆。这里写怎么配置，配置：

 配置完了之后，浏览器还需要导入客户端证书文件，如图，火狐浏览器导入p12格式的个人证书文件。打开火狐的选项，点击“高级”，在选项卡下面选择“证书”

http默认是80端口，https默认是443端口

如果遇到下面的情况：

 可能得原因是：如果域名申请证书无误的话，那就是因为可能用了CDN加速，或者域名解析的主机不对，查找域名解析的主机和你修改的文件的主机是否一致，或者是否用的CDN加速