CentOS 6.7下nginx SSL证书部署的方法

环境

系统环境:CentOS6.7

nginx version: nginx/1.8.1

证书

# ls /opt/nginx/conf/ssl
qingkang.me.crt # 公钥
qingkang.me.key # 私钥

配置

vim nginx.conf

找到以下内容

# HTTPS server
#
#server {
# listen  443 ssl;
# server_name localhost;
# ssl_certificate  cert.pem;
# ssl_certificate_key cert.key;
# ssl_session_cache shared:SSL:1m;
# ssl_session_timeout 5m;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
# location / {
#  root html;
#  index index.html index.htm;
# }
#}

修改为:

server {
  listen  443 ssl;
   server_name qingkang.me;
  ssl_certificate  ssl/qingkang.me.crt;
  ssl_certificate_key ssl/qingkang.me.key;
  ssl_session_cache shared:SSL:1m;
  ssl_session_timeout 5m;
  ssl_ciphers HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers on;
  location / {
   root html;
   index index.html index.htm;
  }
 }

检查配置

/opt/nginx/sbin/nginx -t

重启Nginx生效

/opt/nginx/sbin/nginx -s reload

相关推荐