CentOS7配置Nginx支持HTTPS訪問

1.安裝git和bc

yum -y install git bc

2.安裝Nginx

    1.準備：      

yum install -y gcc-c++ pcre pcre-devel zlib zlib-devel openssl openssl-devel

    2.下載：      

wget https://nginx.org/download/nginx-1.11.6.tar.gz

    3.解壓：    

tar zxvf nginx-1.11.6.tar.gz

    4.編譯安裝：   

cd nginx-1.11.6./configure --with-ipv6 --with-http_ssl_modulemakemake install

3.申請SSL證書

    1.下載Let's Encrypt     

git clone https://github.com/wjg1101766085/certbot.git

    2.運行Let's Encrypt    

cd certbot./letsencrypt-auto

   生成文件： 

                cert.pem: 域名證書
                chain.pem: The Let's Encrypt 證書
                fullchain.pem: 上面兩者合體
                privkey.pem: 證書密鑰

4.配置Nginx

    1.修改nginx.conf文件     

nano /usr/local/nginx/conf/nginx.conf添加： ssl_certificate /etc/letsencrypt/live/域名/fullchain.pem;ssl_certificate_key /etc/letsencrypt/live/域名/privkey.pem;修改：server_name 域名;

 5.自動續簽證書

    創建定時任務執行 letsencrypt路徑/letsencrypt-auto renew

    例如：

crontab -e新增一行30 2 * * 1 letsencrypt路徑/letsencrypt-auto renew

感謝閱讀，希望能幫助到大家，謝謝大家對本站的支持！