mkdir -p /etc/nginx/ssl
生成私钥
openssl genrsa -des3 -out server.key 1024
提示输入密码和确认密码
生成证书
openssl req -new -key server.key -out server.csr
提示输入密码,国家,省份,城市,组织等信息
生成无密码私钥
openssl rsa -in server.key -out public.key
颁发证书
openssl x509 -req -days 365 -in server.csr -signkey public.key -out server.crt
配置nginx站点
server {
listen 443;
ssl on;
ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/public.key;
server_name test.phpfs.com;
root /data/html/test.phpfs.com/;
location / {
autoindex on;
}
}
配置apache站点
提示:Invalid command ‘SSLEngine’, perhaps misspelled or defined by a module not included in the server configuration
Action ‘configtest’ failed.
需要启用sudo a2enmod ssl
ServerName test.phpfs.com
DocumentRoot /var/www/html/test
SSLEngine on
SSLCertificateFile /etc/nginx/ssl/server.crt
SSLCertificateKeyFile /etc/nginx/ssl/public.key
