SSL certificate deployment

When we finish applying SSL After certificate , Also need to nginx Make the relevant configuration , Can be converted to a secure connection .

Download the certificate file to the server

1. First , Go to the server console , Download to local certificate .

After the above screenshot operation , We can download the certificate locally .
After decompression, as shown in the figure ：
among ：
.key The end file is the key file .
.pem The end file is the certificate file .
We need to upload these two files to the server .

2. Upload the local certificate to the specified directory of the server

I upload it here to /usr/local/nginx/cert/ Under the table of contents .
After uploading, see the figure ：
It contains our The key file and Certificate file
Okay . So we upload the certificate to the server .

To configure nginx.conf

We also need to configure nginx.conf File to validate the certificate file .
add to server modular .
Add modules to the configuration file server modular .
commonly , The default configuration file has these contents , It's just commented out . Let's just let go .
however , Also need to change something . The following tips have been given .

server {
        listen       443 ssl;
        server_name  localhost;
        #  The following path is the absolute path of the file you uploaded in the previous step .
        #  If you don't write the absolute path, you will report an error 
        ssl_certificate      /usr/local/nginx/cert/xxxxxxxx_bundle.pem;
        ssl_certificate_key  /usr/local/nginx/cert/xxxxxxxx.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
    }

nginx add to ssl modular

1. Check which modules we currently have installed

/usr/local/ngxin/sbin/nginx -V

Display information ：

nginx version: nginx/1.12.2
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC) 
configure arguments:

configure arguments The module installed for us . You can see that it is not installed ssl modular .
If you contain ngx_http_ssl_module, Then you can skip the step of adding modules .

2. Get into nginx Installation directory

Be careful ： No /usr/local/nginx/
My installation directory is ：/usr/local/nginx-1.20.2
It contains configure file .
Under the installation directory, enter ：

• ./configure --prefix=/usr/local/nginx
• ./configure --with-http_ssl_module
• make
• make install

3. Backup nginx. And then compile the nginx Replace the original nginx.

• cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak
• cp ./objs/nginx /usr/local/nginx/sbin/

restart nginx And test the

restart ：

• /usr/local/nginx/sbin/nginx -s reload

test ：
Viewer input https:// domain name
The connection is secure , success .