zoukankan      html  css  js  c++  java
  • nginx配置ssl

    1.使用pfx证书配置ssl (http://www.heartlifes.com/archives/12/)

       。上传证书

       。生成证书crt及key文件

           openssl pkcs12 -in /usr/local/nginx/ssl/xxx.pfx -clcerts -nokeys -out /usr/local/nginx/ssl/xxx.crt

           openssl pkcs12 -in /usr/local/nginx/ssl/xxx.pfx -nocerts -nodes -out /usr/local/nginx/ssl/xxx.rsa

       。验证证书正确性

           openssl s_server -www -accept 443 -cert /usr/local/nginx/ssl/xxx.crt -key /usr/local/nginx/ssl/xxx.rsa

       。配置nginx 

    server {  
        listen 443;  
        server_name localhost;
        ssl on;  
        ssl_certificate /usr/local/nginx/ssl/xxx.crt;  
        ssl_certificate_key /usr/local/nginx/ssl/xxx.rsa;  
        ssl_session_timeout 5m;  
        ssl_protocols SSLv2 SSLv3 TLSv1;  
        ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;  
        ssl_prefer_server_ciphers on;  
        location ~ /api/(.*) {
                proxy_redirect off;
                proxy_set_header Host $host;
                proxy_set_header X-Ssl on;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_pass http://serverAPI;
            }
        }
    

      

  • 相关阅读:
    二叉树的镜像
    判断树B是不是树A的子结构
    LeetCode-21. Merge Two Sorted Lists
    LeetCode-Reverse Linked List I & II
    LeetCode-Permutations & Permutations II
    Linux常用命令
    Mac OS 快捷键
    Git 常用命令
    SVM参数寻优:grid search
    转载:Normal Equation证明及应用
  • 原文地址:https://www.cnblogs.com/zjxbetter/p/5377848.html
Copyright © 2011-2022 走看看