本文共 1744 字，大约阅读时间需要 5 分钟。

Nginx ??SSL????

??????

???Nginx SSL???????????????????????SSL??????????????????????????????????????????Godaddy????????????????

• ????????Godaddy????
• SSL?????Godaddy?UCC/SAN SSL??????5????
• ??????????????CentOS 7.6.1810???
• WEB??????Nginx?????

????SSL??

?Godaddy?????SSL??????????????

SSL???????

?????????????4?????SAN?????????????????????????

???????

????????????????csr?????????private-key????????private-key???.key???????

?????????????????????????????????ANSI???

iconv -c -f UTF8 -t ASCII generated-private-key.key >> generated-private-key.key

???? NGINX CSR ??

??????????????????????????

?????CSR???

openssl req -new -newkey rsa:2048 -nodes -keyout YOUR_DOMAIN.key -out YOUR_DOMAIN.csr

?YOUR_DOMAIN????????????

??CSR?????

?Godaddy????????CSR??????????????????????????????

?????????

??????????????????????

???????

?Godaddy?????????????????.crt?????.pem?????????.crt?????????.crt???

cat f84e19a2f44c6386.crt gd_bundle-g2-g1.crt >> YOUR_DOMAIN.crt

???????????

?????.crt???????????????????????

Nginx???

??Nginx??????/etc/nginx/conf.d/default.conf?????????

server{     listen 443 ssl;  server_name test.com  www.test.com;  ssl_certificate /etc/nginx/conf.d/cert/YOUR_DOMAIN.crt;  ssl_certificate_key /etc/nginx/conf.d/cert/YOUR_DOMAIN.key;  location /{       root /data/pc/test/dist;    index index.html;    try_files $uri $uri/ /index.html;}}

????????Nginx???

systemctl restart nginx

???????

????????80?443?????????????

firewall-cmd --list-ports

?????????????

firewall-cmd --zone=public --add-port=80/tcp --permanent  firewall-cmd --zone=public --add-port=443/tcp --permanent  firewall-cmd --reload

???????

??????????????HTTPS?????????????????????????????Nginx??????????????

????

1. ?????????????????????

2. ?????????2??????

3. ?????????????????????

转载地址：http://nmti.baihongyu.com/