{"id":415,"date":"2016-09-28T10:36:58","date_gmt":"2016-09-28T02:36:58","guid":{"rendered":"http:\/\/blog.sway.com.cn\/?p=415"},"modified":"2016-09-28T10:36:58","modified_gmt":"2016-09-28T02:36:58","slug":"%e4%bd%bf%e7%94%a8nginx-%e5%8f%8d%e5%90%91%e4%bb%a3%e7%90%86%e5%ae%9e%e7%8e%b0%e8%b4%9f%e8%bd%bd%e5%9d%87%e8%a1%a1%e8%a7%a3%e5%86%b3https-%e8%af%81%e4%b9%a6%e9%97%ae%e9%a2%98","status":"publish","type":"post","link":"http:\/\/blog.sway.com.cn\/?p=415","title":{"rendered":"\u4f7f\u7528nginx \u53cd\u5411\u4ee3\u7406\u5b9e\u73b0\u8d1f\u8f7d\u5747\u8861\u89e3\u51b3HTTPS \u8bc1\u4e66\u95ee\u9898"},"content":{"rendered":"<p>\u7531\u4e8e\u9879\u76ee\u9700\u8981 \u8d1f\u8f7d\u5747\u8861\u7531NBL \u8f6c\u6210nginx \u53cd\u5411\u4ee3\u7406\u3002\u8003\u8651\u90fd\u662fhttps\u6a21\u5757\uff0c\u6240\u4ee5\u8bc1\u4e66\u6210\u4e86\u4e2a\u96be\u9898\u3002<\/p>\n<p>\u89e3\u51b3\u65b9\u6848\uff1a<\/p>\n<p>1.\u4e0b\u8f7dopenssl(windows \u5b89\u88c5\u5305)<\/p>\n<p>2.\u6253\u5f00bin\/\u4e0b\u9762\u7684openssl.exe<\/p>\n<p>3.\u518d\u539f\u6765\u7684IIS\u4e0a\u9762\u628a\u8bc1\u4e66\u5bfc\u51fa.pfx(\u57df\u670d\u52a1\u5668\u8bc1\u4e66\u7533\u8bf7\uff0c\u4e3b\u8981\u9002\u7528\u57df\u5185)<\/p>\n<p>4.\u5229\u7528openssl \u8fdb\u884c\u8f6c\u5316\uff1a<\/p>\n<pre class=\"lang:sh decode:true \">openssl pkcs12 -in server.pfx -nodes -out server.pem # \u751f\u6210\u660e\u6587\u6240\u6709\u5185\u5bb9\r\nopenssl rsa -in server.pem -out server.key # \u53d6 key \u6587\u4ef6\r\nopenssl x509 -in server.pem -out server.crt # \u53d6\u8bc1\u4e66<\/pre>\n<p>5.nginx \u4e0a\u9762\u5f00\u59cb\u914d\u7f6e\uff1a<\/p>\n<pre class=\"lang:sh decode:true\">upstream backend\r\n{\r\n#ip_hash;\r\nserver 10.1.0.245:81;\r\nserver 10.1.0.42:81;\r\n}\r\n    server {\r\n        listen     80;\r\n        listen     443 ssl;\r\n        server_name  office.dahuatech.com;\r\n        ssl_certificate      server.crt;\r\n        ssl_certificate_key  server.key;\r\n        #ssl_session_cache    shared:SSL:1m;\r\n        ssl_session_timeout  5m;\r\n        ssl_ciphers  HIGH:!aNULL:!MD5;\r\n        #ssl_prefer_server_ciphers  on;\r\n        #charset koi8-r;\r\n        #access_log  logs\/host.access.log  main;\r\n\r\n      location \/ {\r\n        proxy_pass  http:\/\/backend;\r\n        #Proxy Settings\r\n        proxy_redirect     off;\r\n        proxy_set_header   Host             $host;\r\n        proxy_set_header   X-Real-IP        $remote_addr;\r\n        proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;\r\n        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;\r\n        proxy_max_temp_file_size 0;\r\n        proxy_connect_timeout      90;\r\n        proxy_send_timeout         90;\r\n        proxy_read_timeout         90;\r\n        proxy_buffer_size          4k;\r\n        proxy_buffers              4 32k;\r\n        proxy_busy_buffers_size    64k;\r\n        proxy_temp_file_write_size 64k;\r\n        }<\/pre>\n<p>\u6309\u7167\u4e0a\u9762\u914d\u7f6e\u5c31\u53ef\u4ee5\u3002\u8fd9\u6837\u57df\u5185\u6240\u6709\u7684\u7528\u6237\u90fd\u53ef\u4ee5\u5728\u4fe1\u4efb\u8bc1\u4e66\u5185\u3002<\/p>\n<p>\u8bb0\u5f55\u4e0b \u9001\u7ed9\u9700\u8981\u7684\u4eba<\/p>\n<p>OPENSSL \u5b89\u88c5\u5305\u4e0b\u8f7d\uff1a<a id=\"\" href=\"http:\/\/files.cnblogs.com\/flyfish2012\/Win32OpenSSL-0_9_8l.zip\">Win32OpenSSL-0_9_8l.zip<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u7531\u4e8e\u9879\u76ee\u9700\u8981 \u8d1f\u8f7d\u5747\u8861\u7531NBL \u8f6c\u6210nginx \u53cd\u5411\u4ee3\u7406\u3002\u8003\u8651\u90fd\u662fhttps\u6a21\u5757 &hellip; <a href=\"http:\/\/blog.sway.com.cn\/?p=415\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[149],"tags":[152,153],"class_list":["post-415","post","type-post","status-publish","format-standard","hentry","category-nginx","tag-nginx","tag-153"],"_links":{"self":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/415","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=415"}],"version-history":[{"count":1,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/415\/revisions"}],"predecessor-version":[{"id":416,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=\/wp\/v2\/posts\/415\/revisions\/416"}],"wp:attachment":[{"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=415"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=415"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/blog.sway.com.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=415"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}