您可以将已签发的SSL证书安装到Nginx(或Tengine)服务器上.
1. 服务器上新建目录,存放服务器证书
mkdir /usr/local/nginx/ca
2. 将证书存放到 ca目录
rz -y
3. 配置nginx server节点
server {
listen 443;
server_name static.xxx.com;
charset utf-8;
root /data/wwwroot/www;
ssl on;
ssl_certificate /usr/local/nginx/ca/6759177__xxx.com.pem;
ssl_certificate_key /usr/local/nginx/ca/6759177__xxx.com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM;
ssl_prefer_server_ciphers on;
error_page 404 /404.html;
}
4. 重启 nginx
/usr/local/nginx/sbin/nginx -s reload
over.