Enable https using the free startssl service
Enable https on the website or use the free startssl service
The key steps to use https in the website are:
1. Use your own company information to generate your own CSR file and key file, one of the following methods.
The first type: online generation [https://www.trustasia.com/tools/csr-generator.htm]
The second type: openssl req -new -nodes -keyout yourname.key -out yourname.csr
linux command line generation
The third method: [https://download.startpki.com/startcom/startcomtool.exe] Download and use this tool to generate
2. Use your own csr and key files to register your own domain name on startssl.com and generate Your own certificate crt.
Free abroad: https://startssl.com/Certificates/ApplySSLCert
Domestic free: SSL certificate: WoSign free SSL certificate G2 (application address https://buy.wosign.com/ApplyForSSL.html choose the first free SSL)
3. Configure and use your own certificate crt on nginx
<code><span>#</span> server { listen <span>443</span><span>;</span> server_name xxx<span>.clcw</span><span>.com</span><span>.cn</span><span>;</span> root html<span>;</span> ssl on<span>;</span> ssl_certificate /home/songaimin/job/nginx-conf/ssl/xxx<span>.clcw</span><span>.com</span><span>.cn</span>_bundle<span>.crt</span><span>;</span> ssl_certificate_key /home/songaimin/job/nginx-conf/ssl/xxx<span>.clcw</span><span>.com</span><span>.cn</span><span>.key</span><span>;</span> ssl_session_timeout <span>5</span>m<span>;</span> ssl_protocols SSLv2 SSLv3 TLSv1<span>;</span> ssl_ciphers HIGH:!aNULL:!MD5<span>;</span> ssl_prefer_server_ciphers on<span>;</span> location / { } }</code>
Restart the nginx server and check if 443 starts normally.
Visit https://xxx.clcw.com.cn and look at the address bar. There is a green lock mark. Congratulations on your success! ! ! !
').addClass('pre-numbering').hide(); $(this).addClass('has-numbering').parent().append($numbering); for (i = 1; i ').text(i)); }; $numbering.fadeIn(1700); }); });The above introduces the use of the free startssl service to enable https, including the relevant content. I hope it will be helpful to friends who are interested in PHP tutorials.

Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

AI Hentai Generator
Generate AI Hentai for free.

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics



To allow the Tomcat server to access the external network, you need to: modify the Tomcat configuration file to allow external connections. Add a firewall rule to allow access to the Tomcat server port. Create a DNS record pointing the domain name to the Tomcat server public IP. Optional: Use a reverse proxy to improve security and performance. Optional: Set up HTTPS for increased security.

Converting an HTML file to a URL requires a web server, which involves the following steps: Obtain a web server. Set up a web server. Upload HTML file. Create a domain name. Route the request.

Server deployment steps for a Node.js project: Prepare the deployment environment: obtain server access, install Node.js, set up a Git repository. Build the application: Use npm run build to generate deployable code and dependencies. Upload code to the server: via Git or File Transfer Protocol. Install dependencies: SSH into the server and use npm install to install application dependencies. Start the application: Use a command such as node index.js to start the application, or use a process manager such as pm2. Configure a reverse proxy (optional): Use a reverse proxy such as Nginx or Apache to route traffic to your application

Yes, Node.js can be accessed from the outside. You can use the following methods: Use Cloud Functions to deploy the function and make it publicly accessible. Use the Express framework to create routes and define endpoints. Use Nginx to reverse proxy requests to Node.js applications. Use Docker containers to run Node.js applications and expose them through port mapping.

To successfully deploy and maintain a PHP website, you need to perform the following steps: Select a web server (such as Apache or Nginx) Install PHP Create a database and connect PHP Upload code to the server Set up domain name and DNS Monitoring website maintenance steps include updating PHP and web servers, and backing up the website , monitor error logs and update content.

An important task for Linux administrators is to protect the server from illegal attacks or access. By default, Linux systems come with well-configured firewalls, such as iptables, Uncomplicated Firewall (UFW), ConfigServerSecurityFirewall (CSF), etc., which can prevent a variety of attacks. Any machine connected to the Internet is a potential target for malicious attacks. There is a tool called Fail2Ban that can be used to mitigate illegal access on the server. What is Fail2Ban? Fail2Ban[1] is an intrusion prevention software that protects servers from brute force attacks. It is written in Python programming language

Today, I will lead you to install Nginx in a Linux environment. The Linux system used here is CentOS7.2. Prepare the installation tools 1. Download Nginx from the Nginx official website. The version used here is: 1.13.6.2. Upload the downloaded Nginx to Linux. Here, the /opt/nginx directory is used as an example. Run "tar-zxvfnginx-1.13.6.tar.gz" to decompress. 3. Switch to the /opt/nginx/nginx-1.13.6 directory and run ./configure for initial configuration. If the following prompt appears, it means that PCRE is not installed on the machine, and Nginx needs to

After yum installs keepalived, configure the keepalived configuration file. Note that in the keepalived configuration files of master and backup, the network card name is the network card name of the current machine. VIP is selected as an available IP. It is usually used in high availability and LAN environments. There are many, so this VIP is an intranet IP in the same network segment as the two machines. If used in an external network environment, it does not matter whether it is on the same network segment, as long as the client can access it. Stop the nginx service and start the keepalived service. You will see that keepalived pulls the nginx service to start. If it cannot start and fails, it is basically a problem with the configuration files and scripts, or a prevention problem.
