{"id":43863,"date":"2025-06-15T17:50:57","date_gmt":"2025-06-15T09:50:57","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/43863.html"},"modified":"2025-06-15T17:50:57","modified_gmt":"2025-06-15T09:50:57","slug":"%e5%9f%ba%e4%ba%8e-nginx-%e6%9c%8d%e5%8a%a1%e5%99%a8%e7%9a%84%e6%b3%9b%e5%9f%9f%e5%90%8d-ssl-%e8%af%81%e4%b9%a6%e7%94%b3%e8%af%b7%e4%b8%8e%e9%83%a8%e7%bd%b2","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/43863.html","title":{"rendered":"\u57fa\u4e8e Nginx \u670d\u52a1\u5668\u7684\u6cdb\u57df\u540d SSL \u8bc1\u4e66\u7533\u8bf7\u4e0e\u90e8\u7f72"},"content":{"rendered":"

\u4e00\u3001\u51c6\u5907\u5de5\u4f5c：<\/h2>\n

1.\u4e2a\u4eba\u57df\u540d\u4e00\u4e2a\u3010\u5fc5\u987b\u3011<\/p>\n

2.\u57df\u540d\u5907\u6848 \u3010\u53ef\u9009\u3011<\/p>\n

\u672c\u5b9e\u9a8c\u4e3b\u8981\u6d89\u53ca\u4ee5\u4e0b\u51e0\u70b9\u5185\u5bb9：<\/p>\n

1.CentOS 7.X \u4e0b\u7684 Nginx \u670d\u52a1\u5668\u642d\u5efa\u3002<\/p>\n

2.Nginx \u670d\u52a1\u5668\u5f00\u542f 443 \u76d1\u542c\u53ca 80 \u5f3a\u5236\u8df3\u8f6c 443\u3002<\/p>\n

3.SSL \u6cdb\u57df\u540d\u7533\u8bf7\u53ca\u8bc1\u4e66\u81ea\u52a8\u5316\u90e8\u7f72\u548c\u7eed\u671f\u3002<\/p>\n

\u53ef\u9009\u90e8\u5206：<\/p>\n

1.DNS \u6cdb\u57df\u540d\u89e3\u6790\u3002<\/p>\n

2.CDN \u6cdb\u57df\u540d\u5206\u53d1\u53ca SSL \u8bc1\u4e66\u90e8\u7f72\u3002<\/p>\n

\u4e8c\u3001\u5b89\u88c5 Nginx \u670d\u52a1\u5668<\/h2>\n

\u8fd9\u91cc\u6211\u4eec\u4f7f\u7528 yum \u5b89\u88c5 Nginx \u670d\u52a1\u5668\u3002<\/p>\n

yum install -y nginx <\/p>\n

\u542f\u52a8 Nginx \u670d\u52a1\u5668<\/h5>\n

\u5b89\u88c5\u540e\u7684 Nginx \u6ca1\u6709\u542f\u52a8，\u5148\u542f\u52a8 Nginx \u670d\u52a1\u5668\u3002<\/p>\n

systemctl start nginx.service <\/p>\n

\u5f00\u542f 443 \u76d1\u542c<\/h5>\n

Nginx \u542f\u52a8\u540e\u9ed8\u8ba4\u53ea\u76d1\u542c 80 \u7aef\u53e3\u3002<\/p>\n

\u8fd9\u91cc\u6211\u4eec\u628a 443 \u7aef\u53e3\u7684\u76d1\u542c\u4e5f\u4e00\u5e76\u5f00\u542f\u3002<\/p>\n

\u7f16\u8f91 \u5168\u5c40\u914d\u7f6e\u6587\u4ef6nginx.conf，\u53c2\u8003\u4ee3\u7801\u5982\u4e0b：<\/p>\n

# For more information on configuration, see:
\n# * Official English Documentation: http:\/\/nginx.org\/en\/docs\/
\n# * Official Russian Documentation: http:\/\/nginx.org\/ru\/docs\/<\/p>\n

user nginx;
\nworker_processes auto;
\nerror_log \/var\/log\/nginx\/error.log;
\npid \/run\/nginx.pid;<\/p>\n

# Load dynamic modules. See \/usr\/share\/nginx\/README.dynamic.
\ninclude \/usr\/share\/nginx\/modules\/*.conf;<\/p>\n

events {
\n worker_connections 1024;
\n}<\/p>\n

http {
\n log_format main '$remote_addr – $remote_user [$time_local] "$request" '
\n '$status $body_bytes_sent "$http_referer" '
\n '"$http_user_agent" "$http_x_forwarded_for"';<\/p>\n

access_log \/var\/log\/nginx\/access.log main;<\/p>\n

sendfile on;
\n tcp_nopush on;
\n tcp_nodelay on;
\n keepalive_timeout 65;
\n types_hash_max_size 2048;<\/p>\n

include \/etc\/nginx\/mime.types;
\n default_type application\/octet-stream;<\/p>\n

# Load modular configuration files from the \/etc\/nginx\/conf.d directory.
\n # See http:\/\/nginx.org\/en\/docs\/ngx_core_module.html#include
\n # for more information.
\n include \/etc\/nginx\/conf.d\/*.conf;<\/p>\n

server {
\n listen 80 default_server;
\n listen [::]:80 default_server;
\n server_name \u8bf7\u8f93\u5165\u4f60\u7684\u57df\u540d;
\n rewrite ^(.*)$ https:\/\/$host$1 permanent;
\n root \/usr\/share\/nginx\/html;<\/p>\n

# Load configuration files for the default server block.
\n include \/etc\/nginx\/default.d\/*.conf;<\/p>\n

location \/ {
\n }<\/p>\n

error_page 404 \/404.html;
\n location = \/40x.html {
\n }<\/p>\n

error_page 500 502 503 504 \/50x.html;
\n location = \/50x.html {
\n }
\n }<\/p>\n

# Settings for a TLS enabled server.<\/p>\n

server {
\n listen 443 ssl http2 default_server;
\n listen [::]:443 ssl http2 default_server;
\n server_name \u8bf7\u8f93\u5165\u4f60\u7684\u57df\u540d;
\n root \/usr\/share\/nginx\/html;<\/p>\n

ssl_certificate "\/etc\/pki\/nginx\/server.crt";
\n ssl_certificate_key "\/etc\/pki\/nginx\/private\/server.key";
\n ssl_session_cache shared:SSL:1m;
\n ssl_session_timeout 10m;
\n ssl_ciphers HIGH:!aNULL:!MD5;
\n ssl_prefer_server_ciphers on;<\/p>\n

# Load configuration files for the default server block.
\n include \/etc\/nginx\/default.d\/*.conf;<\/p>\n

location \/ {
\n }<\/p>\n

error_page 404 \/404.html;
\n location = \/40x.html {
\n }<\/p>\n

error_page 500 502 503 504 \/50x.html;
\n location = \/50x.html {
\n }
\n }<\/p>\n

} <\/p>\n

\u4e09\u3001SSL \u6cdb\u57df\u540d\u8bc1\u4e66<\/h2>\n

\u63a5\u4e0b\u6765\u6211\u4eec\u5c06\u5728 Let\u2019s Encrypt \u7533\u8bf7\u8bc1\u4e66\u3002<\/p>\n