作用：SSL證書卸載

1、制作證書

openssl genrsa -des3 -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl rsa -in server.key -out server.key
openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

放在指定目錄，比如 /usr/local/cert

TODO 其他證書制作方式

2、配置nginx https證書

nginx.conf文件，注意proxy_pass后面的斜杠，加和不加效果不一樣

??? server {
??????? listen 443 ssl;
??????? server_name? localhost;

??????? ssl_certificate /usr/local/cert/server.crt;
??????? ssl_certificate_key /usr/local/cert/server.key;
??????? ssl_session_timeout 5m;
??????? ssl_session_cache shared:SSL:50m;
??????? ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
??????? ssl_protocols TLSV1.1 TLSV1.2 SSLv2 SSLv3;
??????? ssl_prefer_server_ciphers on;
?? ??? ?
??????? location /test1 {
??????????? proxy_pass http://192.168.137.201:8081/;
??????? }
?? ??? ?
?? ??? ?location /test2 {
??????????? proxy_pass http://192.168.137.201:8082/;
??????? }
?? ??? ?
?? ?}

3、配置nginx wss證書

http://nginx.org/en/docs/http/websocket.html

ws：8050 -> 8060

??? server {
??????? listen 8050;
??????? server_name localhost;
??????? location / {
??????????? proxy_pass http://172.16.1.127:8060/;
??????????? proxy_http_version 1.1;
??????????? proxy_read_timeout 3600s;
??????????? proxy_set_header Upgrade $http_upgrade;
??????????? proxy_set_header Connection $connection_upgrade;
??????? }
??? }

wss：8450 -> 8460?? 證書和https的一樣

map $http_upgrade $connection_upgrade {
??? default upgrade;
??? '' close;
}

??? server {
??????? listen 8450 ssl;
??????? server_name localhost;

??????? ssl_certificate /usr/local/cert/server.crt;
??????? ssl_certificate_key /usr/local/cert/server.key;
??????? ssl_session_timeout 5m;
??????? ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
??????? ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
??????? ssl_prefer_server_ciphers on;

??????? location / {
??????????? proxy_pass http://172.16.1.127:8460/;
??????????? proxy_http_version 1.1;
??????????? proxy_read_timeout 3600s;
??????????? proxy_set_header Upgrade $http_upgrade;
??????????? proxy_set_header Connection $connection_upgrade;
??????? }
??? }

可以使用wscat測試文章來源地址http://www.zghlxwxcb.cn/news/detail-439657.html

到了這里，關(guān)于nginx: 配置https證書，wss證書的文章就介紹完了。如果您還想了解更多內(nèi)容，請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！