{"id":338,"date":"2020-12-23T20:45:29","date_gmt":"2020-12-23T12:45:29","guid":{"rendered":"http:\/\/www.heliang.net.cn\/?p=338"},"modified":"2020-12-23T20:45:29","modified_gmt":"2020-12-23T12:45:29","slug":"nginx%e9%85%8d%e7%bd%aessl%e4%b9%8b%e5%90%8e%e8%ae%bf%e9%97%aephp%e5%8f%98%e6%88%90%e4%b8%8b%e8%bd%bd%e8%a7%a3%e5%86%b3","status":"publish","type":"post","link":"https:\/\/www.heliang.net.cn\/?p=338","title":{"rendered":"Nginx\u914d\u7f6eSSL\u4e4b\u540e\u8bbf\u95eePHP\u53d8\u6210\u4e0b\u8f7d\u89e3\u51b3"},"content":{"rendered":"

\u4eca\u5929\u7ed9\u535a\u5ba2\u6dfb\u52a0\u963f\u91cc\u7684\u514d\u8d39SSL\u8bc1\u4e66\u7684\u65f6\u5019\uff0c\u9700\u8981\u4fee\u6539nginx.conf\u6587\u4ef6\uff0c\u64cd\u4f5c\u5982\u4e0b\uff1a<\/p>\n

    \n
  1. \u627e\u5230nginx\u76ee\u524d\u542f\u52a8\u7528\u5230\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u5728\/etc\/init.d\/nginx\u91cc\u9762\u53ef\u4ee5\u770b\u5230\u914d\u7f6e\u6587\u4ef6\u6240\u5728\u7684\u8def\u5f84\u3002\u6bd4\u5982\u201cCONFIG=’\/usr\/local\/nginx\/conf\/nginx.conf<\/em>‘\u201d<\/li>\n
  2. \u5907\u4efd\u4e00\u4e0b\u914d\u7f6e\u6587\u4ef6\u5c31\u5f00\u59cb\u4fee\u6539\u5427<\/li>\n
  3. vi nginx.conf<\/em><\/li>\n
  4. \u5f00\u59cb\u7684\u65f6\u5019\u914d\u7f6e\u6587\u4ef6\u6dfb\u52a0server\u6bb5\u843d\u7ed9https\uff0c\u6f0f\u4e86\u201c include enable-php.conf;\u201d<\/span><\/strong>\uff0c\u5bfc\u81f4\u8bbf\u95ee\u7684\u65f6\u5019\u9875\u9762\u76f4\u63a5\u4e0b\u8f7d\u3002<\/li>\n
  5. \u53c2\u8003\u914d\u7f6e\u4fe1\u606f\u5982\u4e0b\u3002<\/li>\n<\/ol>\n
    \n

    server {
            listen       443 ssl;
            listen       [::]:443 ssl;
            server_name  www.heliang.net.cn heliang.net.cn;
            index index.html index.htm index.php;
            root  \/home\/wwwroot\/default;

            ssl_certificate \"\/home\/wwwroot\/ssl\/heliang.net.cn.pem\";
            ssl_certificate_key \"\/home\/wwwroot\/ssl\/heliang.net.cn.key\";
            ssl_protocols TLSv1.2 TLSv1.3;
            ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
            ssl_ecdh_curve secp384r1;
            ssl_session_cache shared:SSL:1m;
            ssl_session_timeout  10m;
    #        ssl_ciphers PROFILE=SYSTEM;
            ssl_prefer_server_ciphers on;
            ssl_session_tickets off;
            keepalive_timeout 70;

            # Load configuration files for the default server block.
            include \/etc\/nginx\/default.d\/*.conf;

            error_page 404 \/404.html;
                location = \/40x.html {
            }

            error_page 500 502 503 504 \/50x.html;
                location = \/50x.html {
            }

            include enable-php.conf;

            location \/nginx_status
            {
                stub_status on;
                access_log   off;
            }

            location ~ .*\\.(gif|jpg|jpeg|png|bmp|swf)$
            {
                expires      30d;
            }

            location ~ .*\\.(js|css)?$
            {
                expires      12h;
            }

            location ~ \/.well-known {
                allow all;
            }

            location ~ \/\\.
            {
                deny all;
            }

            access_log  \/home\/wwwlogs\/access.log;
        }<\/pre>\n<\/blockquote>\n
     <\/p>\n
     <\/p>\n","protected":false},"excerpt":{"rendered":"
    \u4eca\u5929\u7ed9\u535a\u5ba2\u6dfb\u52a0\u963f\u91cc\u7684\u514d\u8d39SSL\u8bc1\u4e66\u7684\u65f6\u5019\uff0c\u9700\u8981\u4fee\u6539nginx.conf\u6587\u4ef6\uff0c\u64cd\u4f5c\u5982\u4e0b\uff1a \u627e\u5230nginx\u76ee\u524d\u542f\u52a8 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1,6],"tags":[21,22,20,19],"_links":{"self":[{"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/posts\/338"}],"collection":[{"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=338"}],"version-history":[{"count":1,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/posts\/338\/revisions"}],"predecessor-version":[{"id":339,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=\/wp\/v2\/posts\/338\/revisions\/339"}],"wp:attachment":[{"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.heliang.net.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}