[网络协议]nginx https 配置

1. 生成服务端私钥和证书

openssl genrsa –out server.key 2048

openssl req –new –key server.key –out server.csr

openssl x509 –req –days 365 –in server.csr –signkey server.key –out server.crt

2. 配置nginx.conf

    server {
        listen       443 ssl;
        server_name  localhost;

        ssl_certificate      ssl/server.crt;
        ssl_certificate_key  ssl/server.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
    }

备注： 注意证书路径要设置正确