nginx https ssl 配置
生活随笔
收集整理的這篇文章主要介紹了
nginx https ssl 配置
小編覺得挺不錯的,現(xiàn)在分享給大家,幫大家做個參考.
#設(shè)置https 訪問
server { listen 443; server_name www.xxx.com; access_log xxx/xxx/xxx.log combined; index index.html index.htm index.php; include /etc/nginx/default.d/*.conf; root /xxx/xxx/xxx/www.xxx.com;ssl on; ssl_certificate /usr/local/nginx/conf/ssl/server.pem; ssl_certificate_key /usr/local/nginx/conf/ssl/server.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDH:AESGCM:HIGH:!RC4:!DH:!MD5:!aNULL:!eNULL; ssl_prefer_server_ciphers on;location ~ [^/]\.php(/|$) {#fastcgi_pass remote_php_ip:9000;fastcgi_pass unix:/dev/shm/php-cgi.sock;fastcgi_index index.php;include fastcgi.conf;} location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico)$ {expires 30d;access_log off;} location ~ .*\.(js|css)?$ {expires 7d;access_log off;} }
server { listen 443; server_name www.xxx.com; access_log xxx/xxx/xxx.log combined; index index.html index.htm index.php; include /etc/nginx/default.d/*.conf; root /xxx/xxx/xxx/www.xxx.com;ssl on; ssl_certificate /usr/local/nginx/conf/ssl/server.pem; ssl_certificate_key /usr/local/nginx/conf/ssl/server.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDH:AESGCM:HIGH:!RC4:!DH:!MD5:!aNULL:!eNULL; ssl_prefer_server_ciphers on;location ~ [^/]\.php(/|$) {#fastcgi_pass remote_php_ip:9000;fastcgi_pass unix:/dev/shm/php-cgi.sock;fastcgi_index index.php;include fastcgi.conf;} location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico)$ {expires 30d;access_log off;} location ~ .*\.(js|css)?$ {expires 7d;access_log off;} }
將http請求強(qiáng)制轉(zhuǎn)換為https
server { listen 80; server_name www.xxx.com; access_log xxx/xxx/xxx.log combined; index index.html index.htm index.php; include /etc/nginx/default.d/*.conf;rewrite ^(.*) https://$server_name$1 permanent;location ~ [^/]\.php(/|$) {#fastcgi_pass remote_php_ip:9000;fastcgi_pass unix:/dev/shm/php-cgi.sock;fastcgi_index index.php;include fastcgi.conf;} location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|ico)$ {expires 30d;access_log off;} location ~ .*\.(js|css)?$ {expires 7d;access_log off;} }?
?
證書需要購買,淘寶便宜;
?
轉(zhuǎn)載于:https://www.cnblogs.com/jackylee92/p/6512447.html
總結(jié)
以上是生活随笔為你收集整理的nginx https ssl 配置的全部內(nèi)容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: 线程的创建
- 下一篇: iOS回顾笔记( 01 )-- XIB