Linux – 盧尛朋友

1．安裝 NGINX

yum -y install nginx

1	yum -y install nginx

2．建立 SSL 憑證存放目錄

mkdir /etc/nginx/ssl

1	mkdir /etc/nginx/ssl

3．用 openssl 產生憑證

openssl req -new -x509 -sha256 -days 3650 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt -nodes -subj  '/C=TW/ST=Taiwan/L=Taipei/O=demo org/OU=demo org unit/CN=demodomain123.com'

1	openssl req -new -x509 -sha256 -days 3650 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt -nodes -subj '/C=TW/ST=Taiwan/L=Taipei/O=demo org/OU=demo org unit/CN=demodomain123.com'

4．設定 NGINX 的憑證、私鑰路徑，監聽 HTTPS

路徑：/etc/nginx/nginx.conf

server {
        listen 80 default_server;
        listen [::]:80 default_server;
        listen 443 ssl;

        root /usr/share/nginx/html;
        index index.html index.htm;

        server_name demodmoain123.com;

        ssl_certificate /etc/nginx/ssl/nginx.crt;
        ssl_certificate_key /etc/nginx/ssl/nginx.key;

        location / {
                try_files $uri $uri/ =404;
        }
}

server {

listen 80 default_server;

listen [::]:80 default_server;

listen 443 ssl;

root /usr/share/nginx/html;

index index.html index.htm;

server_name demodmoain123.com;

ssl_certificate /etc/nginx/ssl/nginx.crt;

ssl_certificate_key /etc/nginx/ssl/nginx.key;

location / {

try_files $uri $uri/ =404;

}

5．重啟 NGINX

service nginx restart

1	service nginx restart

盧尛朋友

學海無涯，回頭是ㄢ‵

分類: Linux

查看 coredump

CentOS 7 使用 openssl 產生 SSL 憑證 (NGINX 範例)

CentOS 7 封包擷取