HTTP--http之https(九)

最新推荐文章于 2024-09-10 04:00:00 发布

转载最新推荐文章于 2024-09-10 04:00:00 发布 · 2.4k 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://segmentfault.com/a/1190000017092028

文章标签：

#git

本文介绍如何使用OpenSSL生成SSL证书的公钥和私钥，以及如何配置Nginx服务器以实现HTTPS访问，并设置HTTP重定向到HTTPS，确保网站的安全连接。

生成公钥和私钥

用git运行以下命令，然后一直按回车

openssl req -x509 -newkey rsa:2048 -nodes -sha256 -keyout localhost-privkey.pem -out localhost-cert.pem

目录结构

文件内容

test.conf

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    }

运行本地服务

test.com

https://test.com

test.com重定向到https://test.com

test.conf

    proxy_cache_path cache levels=1:2 keys_zone=my_cache:10m;

    server {
        listen 80 default_server;
        listen [::]:80 default_server;
        server_name test.com;
        return 302 https://$server_name$request_uri;
    }

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    }