Ubuntu 16.04下配置Nginx HTTPS

下面记录下64位Ubuntu 16.04.1下，Nginx 1.10.1配置HTTPS的方法(亲测日期2016.10。10)：

ubuntu apt-get install nginx 的 Nginx默认是支持SSL的。

1、生成自签名证书:

 cd /var/www
 mkdir ssl
 cd ssl
 sudo openssl genrsa -des3 -out server.key 1024
 sudo openssl req -new -key server.key -out server.csr
 sudo openssl rsa -in server.key -out server_nopwd.key
 sudo openssl x509 -req -days 365 -in server.csr -signkey server_nopwd.key -out server.crt

其中证书的生成过程大致如下

 proto@ubuntu:~$ sudo openssl req -new -key server.key -out server.csr
 Enter pass phrase for server.key:   ←输入第一步中生成server.key时设置的密码
 You are about to be asked to enter information that will be incorporated
 into your certificate request.
 What you are about to enter is what is called a Distinguished Name or a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -----
 Country Name (2 letter code) [AU]:CN　←输入国家代码
 State or Province Name (full name) [Some-State]:CHONGQING　← 输入省名
 Locality Name (eg, city) []:CHONGQING　←输入城市名
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:MIKE　← 输入公司名
 Organizational Unit Name (eg, section) []:MIKE　← 输入组织单位名
 Common Name (eg, YOUR name) []:www.mike.me　← 输入主机名
 Email Address []:[email protected]　←输入电子邮箱地址
 ← 回车
 ← 回车

2、配置Nginx HTTPS访问：

sudo vim /etc/nginx/sites-available/default

 server {
      listen 443 ssl default_server；
      listen [::]:443 ssl default_server;

      ###其他配置

      ssl                  on;
      ssl_certificate      /var/www/ssl/server.crt;
      ssl_certificate_key  /var/www/ssl/server_nopwd.key;
      ###
  }

OK,然后我们重新加载下nginx配置文件： service nginx restart