怎么在Nginx中搭建一个https服务器

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

upstream sslfpm {

 server 127.0.0.1:9000 weight=10 max_fails=3 fail_timeout=20s;

}

server {

 listen   192.168.1.*:443;

 server_name 192.168.1.*;

 #为一个server开启ssl支持

 ssl         on;

 #为虚拟主机指定pem格式的证书文件

 ssl_certificate   /home/wangzhengyi/ssl/wangzhengyi.crt;

 #为虚拟主机指定私钥文件

 ssl_certificate_key /home/wangzhengyi/ssl/wangzhengyi_nopass.key;

 #客户端能够重复使用存储在缓存中的会话参数时间

 ssl_session_timeout 5m;

 #指定使用的ssl协议

 ssl_protocols SSLv3 TLSv1;

 #指定许可的密码描述

 ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

 #SSLv3和TLSv1协议的服务器密码需求优先级高于客户端密码

 ssl_prefer_server_ciphers on;

 location / {

 root /home/wangzhengyi/ssl/;

 autoindex on;

     autoindex_exact_size  off;

     autoindex_localtime on;

 }

   # redirect server error pages to the static page /50x.html

   #

   error_page 500 502 503 504 /50x.html;

   error_page 404 /404.html;

 location = /50x.html {

     root /usr/share/nginx/www;

   }

  location = /404.html {

     root /usr/share/nginx/www;

   }

   # proxy the PHP scripts to fpm

   location ~ \.php$ {

 access_log /var/log/nginx/ssl/ssl.access.log main;

 error_log /var/log/nginx/ssl/ssl.error.log;

 root /home/wangzhengyi/ssl/;

 fastcgi_param HTTPS on;

     include /etc/nginx/fastcgi_params;

     fastcgi_pass  sslfpm;

   }

}