nginx ssl服务器配置

原创

caidui 2015-07-19 03:09:19 ©著作权

文章标签 ssl nginx 文章分类 服务器

©著作权归作者所有：来自51CTO博客作者caidui的原创作品，请联系作者获取转载授权，否则将追究法律责任

环境:nginx-1.4.0、php-5.4.13、openssl-1.0.1e
LINK: nginx php fpm多实例配置 openssl构建CA认证
配置nginx.conf

# HTTPS server 
    server {
        listen                  443 ssl default_server;
        server_name             localhost;
        ssl                     on;
        ssl_certificate         /usr/local/nginx/conf/ssl/server.pem;
        ssl_certificate_key     /usr/local/nginx/conf/ssl/serverkey.pem;
        ssl_client_certificate  /usr/local/nginx/conf/ssl/cacert.pem;#       ssl_trusted_certificate /usr/local/nginx/demoCA/cacert.pem;
        ssl_crl                 /usr/local/nginx/conf/ssl/crl.pem;#       ssl_stapling            on;#       ssl_stapling_verify     on;#       ssl_stapling_responder http://192.168.11.132/;
        ssl_verify_client       optional_no_ca;
        ssl_session_cache       shared:SSL:10m;
        ssl_session_timeout     5m; 
        ssl_protocols           SSLv2 SSLv3 TLSv1;
        ssl_ciphers             HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers   on;
        ssl_verify_depth        1; 
 
        root            /usr/local/nginx/html;
        index           index.php index.html;
        location ~ \.php$ {
            fastcgi_pass        127.0.0.1:9000;
            include             fastcgi.conf;
            fastcgi_index  index.php;
            expires             off;
        }
    }