Nginx配置多个证书
一、安装
1、创建用户
#1、修改80自动提升为httpsserver { listen 80; server_name localhost; #重写协议 rewrite ^/(.*)$ https:$host/$1 redirect; location / { root html; index index.html index.htm; } error_page 500 502 503 504 /50x.html; location = /50x.html { root html; } }#2、配置https的反向代理 # HTTPS server server { listen 443; server_name www.b.cn; ssl on; #证书 ssl_certificate /data/key/server.crt; ssl_certificate_key /data/key/server.key; ssl_session_timeout 5m; ssl_protocols SSLv2 SSLv3 TLSv1; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { proxy_pass http://10.228.191.237; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 100m; index index.html index.htm; } } server { listen 443; server_name www.a.cn; ssl on; ssl_certificate /data/key/server1.crt; ssl_certificate_key /data/key/server1.key; ssl_session_timeout 5m; ssl_protocols SSLv2 SSLv3 TLSv1; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { proxy_pass http://10.228.191.223; proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 100m; index index.html index.htm; } }