[Linux]阿里云万网域名-腾讯云服务器nginx下配置免费的https

我的域名是在阿里云万网上购买的，服务器是部署在腾讯云上，可以按照下面的步骤配置https

首先登陆阿里云网站控制台，申请免费证书，免费证书只能单一域名。测试地址如：https://gofly.sopans.com/

 

申请稍等几分钟就能通过

 

 

 

 

 

 

 

 

把证书下载到本地，然后上传到腾讯云的服务器上，配置nginx就可以了

nginx的配置如下，注意证书的地址和域名的配置，同时也能支持websocket wss

server {
       listen 443 ssl http2;
        ssl on;
        ssl_certificate   conf.d/cert/4263285_gofly.sopans.com.pem;
        ssl_certificate_key  conf.d/cert/4263285_gofly.sopans.com.key;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        #listen          80; 
        server_name  gofly.sopans.com;
        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
        location / {
                proxy_pass http://127.0.0.1:8081;
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
                    proxy_set_header Origin "";
        }
}
server{
       listen 80;
        server_name  gofly.sopans.com;
        access_log  /var/log/nginx/gofly.sopans.com.access.log  main;
        location / {
                proxy_pass http://127.0.0.1:8081;
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
                    proxy_set_header Origin "";
        }
}

 

来源：oschina

链接：https://my.oschina.net/u/4390412/blog/4440117