1.首先確保機器上安裝了openssl和openssl-devel
#yum install openssl
#yum install openssl-devel
#yum install? nginx
2.安裝好后,啟動nignx??
#nginx
3. 編輯/etc/nginx/nginx.conf
# For more information on configuration, see:
#? * Official English Documentation: http://nginx.org/en/docs/
#? * Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;
# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;
events {
? ? worker_connections 1024;
}
http {
? ? log_format? main? '$remote_addr - $remote_user [$time_local] "$request" '
? ? ? ? ? ? ? ? ? ? ? '$status $body_bytes_sent "$http_referer" '
? ? ? ? ? ? ? ? ? ? ? '"$http_user_agent" "$http_x_forwarded_for"';
? ? access_log? /var/log/nginx/access.log? main;
? ? sendfile? ? ? ? ? ? on;
? ? tcp_nopush? ? ? ? ? on;
? ? tcp_nodelay? ? ? ? on;
? ? keepalive_timeout? 65;
? ? types_hash_max_size 2048;
? ? include? ? ? ? ? ? /etc/nginx/mime.types;
? ? default_type? ? ? ? application/octet-stream;
? ? # Load modular configuration files from the /etc/nginx/conf.d directory.
? ? # See http://nginx.org/en/docs/ngx_core_module.html#include
? ? # for more information.
? ? include /etc/nginx/conf.d/*.conf;
? ? server {
? ? ? ? listen? ? ? 80 default_server;
? ? ? ? listen? ? ? [::]:80 default_server;
? ? ? ? server_name? _;
? ? ? ? root? ? ? ? /usr/share/nginx/html;
? ? ? ? # Load configuration files for the default server block.
? ? ? ? include /etc/nginx/default.d/*.conf;
? ? ? ? location / {
? ? ? ? }
? ? ? ? error_page 404 /404.html;
? ? ? ? ? ? location = /40x.html {
? ? ? ? }
? ? ? ? error_page 500 502 503 504 /50x.html;
? ? ? ? ? ? location = /50x.html {
? ? ? ? }
? ? }
# Settings for a TLS enabled server.
#
? ? server {
? ? ? ? listen? ? ? 443 ssl http2 default_server;
? ? ? ? listen? ? ? [::]:443 ssl http2 default_server;
? ? ? ? server_name? _;
? ? ? ? root? ? ? ? /usr/share/nginx/html;
? ? ? ? ssl_certificate "/etc/nginx/cert/文件名.crt";
? ? ? ? ssl_certificate_key "/etc/nginx/cert/文件名.key";
? ? ? ? ssl_session_cache shared:SSL:1m;
? ? ? ? ssl_session_timeout? 10m;
? ? ? ? ssl_ciphers HIGH:!aNULL:!MD5;
? ? ? ? ssl_prefer_server_ciphers on;
? ? ? ? # Load configuration files for the default server block.
#? ? ? ? include /etc/nginx/default.d/*.conf;
? ? ? ? location / {
? ? ? ? }
? ? ? ? error_page 404 /404.html;
? ? ? ? ? ? location = /40x.html {
? ? ? ? }
? ? ? ? error_page 500 502 503 504 /50x.html;
? ? ? ? ? ? location = /50x.html {
? ? ? ? }
? ? }
}
4.將 *.crt? 和*.key 放入上邊指定路徑的文件夾
5.平滑加載nginx? 配置
# nginx -s reload
