linux 导入ssl证书

sudo mkdir -p /etc/ssl/certs
sudo cp your_domain.crt /etc/ssl/certs/
sudo cp your_private.key /etc/ssl/private/

server {
    listen 80;
    server_name your_domain.com;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    server_name your_domain.com;

    ssl_certificate /etc/ssl/certs/your_domain.crt;
    ssl_certificate_key /etc/ssl/private/your_private.key;

    # 如果有中间证书
    ssl_trusted_certificate /etc/ssl/certs/ca_bundle.crt;

    location / {
        root /var/www/html;
        index index.html index.htm;
    }
}

sudo systemctl restart nginx

<VirtualHost *:443>
    ServerName your_domain.com
    DocumentRoot /var/www/html

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/your_domain.crt
    SSLCertificateKeyFile /etc/ssl/private/your_private.key
    SSLCertificateChainFile /etc/ssl/certs/ca_bundle.crt

    <Directory /var/www/html>
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>

sudo a2enmod ssl
sudo systemctl restart apache2