Nginx安裝SSL證書

方式一

一、 證書轉換

將iis使用的pfx文件轉換爲pem的文件

 

二、nginx配置

server {
    listen 443;
    server_name www.lxnetwork.com;
    ssl on;
    ssl_certificate   cert/lxnetwork.com.pem;
    ssl_certificate_key  cert/lxnetwork.com.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;

    #網站
    location / {
        proxy_pass http://139.224.XX.XX/;		
	proxy_set_header Host $host:$server_port;  #這裏是重點,這樣配置纔不會丟失端口
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header REMOTE-HOST $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

方式二

一、使用合併後的crt證書文件

server {
    listen 443;
    server_name www.lxnetwork.com;
    ssl on;
    ssl_certificate      cert/aaa.crt;
    ssl_certificate_key  cert/aaa.key;

    #網站
    location / {
        proxy_pass http://139.224.XXX.XX/;		
	proxy_set_header Host $host:$server_port;  #這裏是重點,這樣配置纔不會丟失端口
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header REMOTE-HOST $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

還是第二種方式簡單