nginx同一个IP配置多个HTTPS证书

程序员文章站 2022-05-26 15:14:51

...

个人博客地址

同一个IP配置多个https证书

nginx 需要开启TLS功能，--with-openssl-opt="enable-tlsext"，如果没有开启的话需要重新安装一下。
得到以下配置信息，则说明开启成功了。

nginx同一个IP配置多个HTTPS证书

如何重新安装nginx看另一篇文章 nginx重新安装操作

此时我们就可以开始配置nginx conf文件了。
我是将不同的域名放在了单独的配置文件了，如下：

news.conf:

server {
    listen 80;
    listen [::]:80;
    server_name news.xionghaizhi.work;
    rewrite ^ https://$http_host$request_uri? permanent;
}

server {
        server_name  news.xionghaizhi.work;
        listen 443 ssl http2;
        ssl_certificate  /usr/local/nginx/pigx-conf/news.xionghaizhi.work_bundle.crt;
        ssl_certificate_key /usr/local/nginx/pigx-conf/news.xionghaizhi.work.key;
        ssl_session_cache           shared:SSL:1m;
        ssl_session_timeout         5m;
        ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        ssl_prefer_server_ciphers   on;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
}

main.conf:

server {
  listen 80;
  listen [::]:80;
  server_name www.xionghaizhi.work;
  rewrite ^ https://$http_host$request_uri? permanent;
}

server {
    server_name www.xionghaizhi.work xionghaizhi.work;
    charset utf-8;

    listen 443 ssl http2;
    ssl_certificate  /usr/local/nginx/pigx-conf/xionghaizhi.work_bundle.crt;
    ssl_certificate_key /usr/local/nginx/pigx-conf/xionghaizhi.work.key;
    ssl_session_cache           shared:SSL:1m;
    ssl_session_timeout         5m;
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers   on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  }