Nginx配置SSL证书

root@lianst:~#cd /usr/local/nginx/conf/
root@lianst:/usr/local/nginx/conf# openssl genrsa -out www.lianst.cn.key 2048

root@lianst:/usr/local/nginx/conf# openssl req -new -key www.lianst.cn.key -out www.lianst.cn.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
—–
Country Name (2 letter code) [AU]:CN  (这里输入两位大写字母的国家代码 CN是中国)
State or Province Name (full name) [Some-State]:JiangSu (这里省份 可以填写简称，一般填写拼音)
Locality Name (eg, city) []:SuZhou  (这里是城市可以填写简称，一般填拼音)
Organization Name (eg, company) [Internet Widgits Pty Ltd]:LianShiTong (组织或公司名)
Organizational Unit Name (eg, section) []: (不填写直接回车)
Common Name (eg, YOUR name) []:www.lianst.cn  (输入使用ssl的域名，一般不带www)
Email Address []:lianshitong@gmail.com(填写邮箱，有时候证书是发送到这个邮箱)
Please enter the following ‘extra’ attributes
to be sent with your certificate request
A challenge password []:  (不填写直接回车)
An optional company name []:  (不填写直接回车)

	server
{
listen 443;
server_name www.lianst.cn lianst.com;    
index index.html index.htm index.php;
root /home/wwwroot/lianst.com;           
ssl on;
ssl_certificate   ssl.crt;              
ssl_certificate_key www.lianst.cn.key;
location ~ .*\.(php|php5)?$
{
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
fastcgi_param HTTPS on;
include fcgi.conf;
}