nginx https證書生成方式

$ cd /usr/local/nginx/conf
$ openssl genrsa -des3 -out server.key 1024
$ openssl req -new -key server.key -out server.csr
$ cp server.key server.key.org
$ openssl rsa -in server.key.org -out server.key

$ openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

然後配置https服務器相關：

server {
    listen       443 ssl;
    server_name  localhost;
    ssl_certificate      server.crt;
    ssl_certificate_key  server.key;

    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;               
    
    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers  on;
        
    location / {
        root   html;
        index  index.html index.htm;
    }
}