全站HTTPS简单实践

 1 [root@web01 backup]#  openssl req -new -x509 -nodes -out server.crt -keyout server.key
 2 
 3 Generating a 2048 bit RSA private key
 4 ......................................................+++
 5 ...................................+++
 6 
 7 writing new private key to 'server.key'
 8 -----
 9 You are about to be asked to enter information that will be incorporated
10 into your certificate request.
11 What you are about to enter is what is called a Distinguished Name or a DN.
12 There are quite a few fields but you can leave some blank
13 For some fields there will be a default value,
14 If you enter '.', the field will be left blank.
15 -----
16 Country Name (2 letter code) [XX]:CH        #国家名称  
17 State or Province Name (full name) []:bj       #省  
18 Locality Name (eg, city) [Default City]:bj     #市   
19 Organization Name (eg, company) [Default Company Ltd]:ZNIX   #组织名称
20 Organizational Unit Name (eg, section) []:ZNIX   #组织名称
21 Common Name (eg, your name or your server's hostname) []:ZNIX  #服务器名称
22 Email Address []:ADMIN@ZNIX.TOP    #邮箱

1 [root@web01 backup]# ls
2 server.crt  server.key
3 
4 生成的密钥文件
5 [root@web01 backup]# ll
6 total 8
7 -rw-r--r-- 1 root root 1375 Nov  6 14:07 server.crt
8 -rw-r--r-- 1 root root 1704 Nov  6 14:07 server.key

 1 [root@web01 ~]# cat  /application/nginx/conf/extra/www.conf
 2 server {
 3     listen       443 ssl;
 4     server_name  www.etiantian.org;
 5     ssl_certificate      /application/nginx/key/server.crt;
 6     ssl_certificate_key  /application/nginx/key/server.key;
 7     ssl_session_cache    shared:SSL:1m;
 8     ssl_session_timeout  5m;
 9     ssl_ciphers  HIGH:!aNULL:!MD5;
10     ssl_prefer_server_ciphers  on;    
11 
12     location / {
13         root   html/www;
14         index  index.php ;
15     }
16     location ~* .*\.(php|php5)?$ {
17                 root html/www;
18                 fastcgi_pass  127.0.0.1:9000;
19                 fastcgi_index index.php;
20                 include fastcgi.conf;
21     }
22     access_log  logs/access_www.log  main;
23 }