nginx配置ssl

1.准备.key和.pem证书

1.生成.keystore证书

keytool -genkey -alias fkp -keypass 123456 -keyalg RSA -keysize 1024 -validity 365 -keystore /cert/fkp.keystore -storepass 123456 

2.生成.cer证书

keytool -exportcert -file fkp.cer -alias fkp -keystore fkp.keystore -storepass 123456

3.生成.p12证书

keytool -importkeystore -srckeystore fkp.keystore -destkeystore fkp.p12 -deststoretype PKCS12

4.生成.pem证书

openssl x509 -inform der -in fkp.cer -out fkp.pem

5.生成.key证书

openssl pkcs12 -nocerts -nodes -in fkp.p12 -out fkp.key

2.配置nginx配置文件

添加server块

    server {
        listen      8443 ssl;
        server_name 192.168.200.201;

        #以下两个为证书文件
        ssl_certificate /cert/fkp.pem;
        ssl_certificate_key /cert/fkp.key;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout 1m;
        # ssl_protocols SSLv2 SSLv3 TLSv1.2;
        # ssl_ciphers     ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256:AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;
        # ssl_prefer_server_ciphers   on;
        location /httpsDemo/ {
            proxy_pass  https://127.0.0.1:9006;
        }
    }