檢查是否已安裝ssl 模組:
cd /usr/local/nginx/sbin ./nginx -V
[root@server-c00ef8c3-710d-4708-9cde-2c864e7c03e2 sbin]# ./nginx -V nginx version: nginx/1.21.4 built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) configure arguments: --prefix=/usr/local/nginx
如果沒出現configure arguments: --with-http_ssl_module 說明沒有安裝。
cd /usr/local/nginx-1.21.4 ./configure --prefix=/usr/local/nginx --with-http_ssl_module make cp ./objs/nginx /usr/local/nginx/sbin/
再次檢查是否已安裝ssl 模組:
cd /usr/local/nginx/sbin ./nginx -V
[root@server-c00ef8c3-710d-4708-9cde-2c864e7c03e2 sbin]# ./nginx -V nginx version: nginx/1.21.4 built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) built with OpenSSL 1.0.2k-fips 26 Jan 2017 TLS SNI support enabled configure arguments: --prefix=/usr/local/nginx --with-http_ssl_module
將申請好的ssl 憑證拷貝至cert 目錄下:
cd /usr/local/nginx/conf vi nginx.conf
新增https server 設定:
#管理端https server { listen 443 ssl; server_name admin-xxxxx.xxx.xxx; ssl_certificate ../cert/server.crt; ssl_certificate_key ../cert/server.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header Host $http_host; proxy_pass http://localhost:10003; } }
/usr/local/nginx/sbin/nginx -s reload
或
ps -ef|grep nginx kill xxx /usr/local/nginx/sbin/nginx
補充:如果80 連接埠被佔用,用kill [id]來結束進程:
# 查看端口使用 $ netstat -lntp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:80 0.0.
##tcp 0 0 0.0.0.0:80 0.0.0.0 : LISTEN 21307/nginx: mastertcp 0 0 0.0.0.0:22 0.0.0.0: LISTEN 3072/sshdtcp 0 0 0.0.0.0:443 0.0.0tcp 0 0 0.0.0.0:443 0.0.0. LISTEN 21307/nginx: master
結束80 埠程序
$ kill 21307
###再次重啟nginx :###$ /usr/local/nginx/sbin/nginx -c /usr/local/nginx/conf/nginx.conf
以上是Nginx如何設定ssl實作https的詳細內容。更多資訊請關注PHP中文網其他相關文章!