You are here
自己亲自做的 本公司 有关 nginx 的 https ssl 证书 有大用 有大大用
[root@kslk-es-faq vhost]# vim aaaa.com.conf
....................................................................................................................................................
server {
listen 443;
root /www/web/aaaaa/public_html;
server_name aaaaa.com aaaaa1.com;
ssl on;
ssl_certificate cert/aaaaa.pem;
ssl_certificate_key cert/aaaaa.key;
ssl_prefer_server_ciphers on;
ssl_session_timeout 10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
#rewrite ^.*$ http://aaaaa permanent;
index index.html index.php index.htm;
error_page 400 /errpage/400.html;
error_page 403 /errpage/403.html;
error_page 404 /errpage/404.html;
error_page 503 /errpage/503.html;
#rewrite ^/sites/default/files/styles/thumbnail/public/pictures/(.*)$ /sites/default/files/pictures/$1 last;
location ~ \.php$ {
proxy_pass http://127.0.0.1:88;
include naproxy.conf;
}
location /pdf/ {
return 404;
}
location ~* /pdf/.*\.(gif|jpg|jpeg|png)$ {
valid_referers blocked *.luxshare-ict.com;
if ($invalid_referer){
return 404;
}
}
location /doc/ {
return 404;
}
location ~* /doc/.*\.(gif|jpg|jpeg|png)$ {
valid_referers blocked *.aaaa.com;
if ($invalid_referer){
return 404;
}
}
location ~* /sites/default/files/private/.*\.(gif|jpg|jpeg|png|pdf|pptx|xls|xlsx|csv|html|txt|htm)$ {
valid_referers blocked *.aaaa.com;
if ($invalid_referer){
return 404;
}
}
#location /sites/default/files/style/thumbnail/public/pictures/ {
# rewrite /sites/default/files/style/thumbnail/public/pictures/(.*)$ /sites/default/files/pictures/$1 break;
#}
location ~ system.*\.(gif|jpg|jpeg|png|bmp|swf)$ {
proxy_pass http://127.0.0.1:88;
include naproxy.conf;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ {
expires 1d;
}
location ~ .*\.(js|css|htm)?$ {
expires 12h;
}
location ~ /\.ht {
deny all;
}
location / {
try_files $uri @apache;
}
location @apache {
internal;
proxy_pass http://127.0.0.1:88;
include naproxy.conf;
}
}
.............................................................................................................................................................................
[root@ee-ee-eee vhost]# cd /www/wdlinux/nginx-1.8.1/conf/cert
[root@ee-ee-eee cert]# ls #可以看到 aaaaa.pem aaaaa.key
aaaaa.pem aaaaa.key 是从哪里来的呢
是强总发过来的 见 ,解压后文件结构如下
C:\Users\当前用户名\Downloads\dddddd2022.4.21-2023.4.20_1\pem(不包括key)
