linux安裝nginx並設定https（openssl）

關鍵字：linux nginx https openssl

一、安裝依賴包

1.$sudo apt-get install openssl 
  或者$sudo apt-get install libssl-dev

2.$sudo apt-get install libpcre3 libpcre3-dev

二、安裝nginx

1.$cd /usr/local/src
2.sudo wget http://nginx.org/download/nginx-1.2.2.tar.gz
3.$sudo tar -xzvf nginx-1.2.2.tar.gz
4.$cd nginx-1.2.2
5.$./configure --prefix=/opt/nginx --with-http_stub_status_module --with-http_ssl_module --with-zlib --with-pcre
6.$make && make install

三、建立不受信任的SSL Key：

$ cd /usr/local/nginx/conf

$ openssl genrsa -des3 -out server.key 1024

$ openssl req -new -key server.key -out server.csr

$ cp server.key server.key.org
$ openssl rsa -in server.key.org -out server.key

$ openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

四、編輯 nginx.conf

    server {
       
        server_name YOUR_DOMAINNAME_HERE;

        listen 443;

        ssl on;

        #certfile
        ssl_certificate /usr/local/nginx/conf/server.crt;
   
        #keyfile
        ssl_certificate_key /usr/local/nginx/conf/server.key;

        location / {

            #to host name
            proxy_pass  http://127.0.0.1:8080;

            root   html;
            index  index.html index.htm;
        }
    }