HTTP--http之https(九)-CSDN博客

本文介绍如何使用OpenSSL生成SSL证书的公钥和私钥，以及如何配置Nginx服务器以实现HTTPS访问，并设置HTTP重定向到HTTPS，确保网站的安全连接。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

生成公钥和私钥

用git运行以下命令，然后一直按回车

openssl req -x509 -newkey rsa:2048 -nodes -sha256 -keyout localhost-privkey.pem -out localhost-cert.pem

目录结构

文件内容

test.conf

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    }

运行本地服务

test.com

https://test.com

test.com重定向到https://test.com

test.conf

    proxy_cache_path cache levels=1:2 keys_zone=my_cache:10m;

    server {
        listen 80 default_server;
        listen [::]:80 default_server;
        server_name test.com;
        return 302 https://$server_name$request_uri;
    }

    server {
        listen       443;
        server_name  test.com;

        ssl on;
        ssl_certificate_key ../certs/localhost-privkey.pem;
        ssl_certificate ../certs/localhost-cert.pem;

        location / {
            proxy_cache my_cache;
            proxy_pass http://127.0.0.1:8888;
            proxy_set_header Host $host;
        }
    }