Nginx部署https（自己生成证书）

nginx安装

 1、下载nginx

2、命令执行安装

# 所有nginx相关都部署到/work/nginx目录下，且开启ssl
> ./configure --prefix=/work/nginx --with-http_ssl_module
> make
> make install

某域名下ssl证书生成

> openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout /usr/local/ssl/nginx.key -out /usr/local/ssl/nginx.crt

> Country Name (2 letter code) [AU]:CN
> State or Province Name (full name) [Some-State]:BEIJING
> Locality Name (eg, city) []:BEIJING
> Organization Name (eg, company) [Internet Widgits Pty Ltd]:Mock
> Organizational Unit Name (eg, section) []:Mock
> # 注意此处必须是网站域名
> Common Name (e.g. server FQDN or YOUR name) []:www.a.com
> Email Address []:a@11.com

nginx配置

server {
        listen       443 ssl;
        server_name  www.a.com;

        ssl_certificate      ../ssl/nginx.crt;
        ssl_certificate_key  ../ssl/nginx.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
		
    }