项目基础部署汇总三（2）—Nginx配置ssl证书

大家好，欢迎来到IT知识分享网。

server {

listen 80;

server_name 域名;

return 301 https://$server_name$request_uri;

}

server {

listen 443 ssl;

server_name 域名;

ssl_stapling on;

ssl_stapling_verify on;

ssl_certificate_key /opt/data/nginx/域名/key.pem;

ssl_certificate /opt/data/nginx/域名/cert.pem;

ssl_session_timeout 5m;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers 证书码;

ssl_prefer_server_ciphers on;

location ~ /MP_verify_(.*)\.txt {

return 200 “$1”;

}

nginx自带有配置，按照上面的改了，监听443端口就行，ssl证书要选择是nginx配置的，不能是tomcat配置的

# Settings for a TLS enabled server.

#

# server {

# listen 443 ssl http2 default_server;

# listen [::]:443 ssl http2 default_server;

# server_name _;

# root /usr/share/nginx/html;

#

# ssl_certificate “/etc/pki/nginx/server.crt”;

# ssl_certificate_key “/etc/pki/nginx/private/server.key”;

# ssl_session_cache shared:SSL:1m;

# ssl_session_timeout 10m;

# ssl_ciphers PROFILE=SYSTEM;

# ssl_prefer_server_ciphers on;

#

# # Load configuration files for the default server block.

# include /etc/nginx/default.d/*.conf;

#

# location / {

# }

#

# error_page 404 /404.html;

# location = /40x.html {

# }

#

# error_page 500 502 503 504 /50x.html;

# location = /50x.html {

# }

# }