[Nginx] Nginx配置SSL和WSS步骤介绍

• 前言
  
• 一.nginx安装
  
  
  
  • 1.下载nginx
    
  • 2.安装依赖
    
  • 3.编译安装nginx
    
  
  
• 二.ssl配置
  
• 三.wss配置
  

wget http://nginx.org/download/nginx-1.9.0.tar.gz

yum install gcc-c++
yum install -y openssl openssl-devel

yum install -y pcre pcre-devel

yum install -y zlib zlib-devel

tar -zvxf nginx-1.9.0.tar.gz

cd nginx-1.9.0
./configure --with-http_ssl_module

makemake install

whereis nginx

cd /usr/local/nginx/sbin./nginx

#user  nobody;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid    logs/nginx.pid;
events {
  worker_connections  1024;
}
http {
  include     mime.types;
  default_type  application/octet-stream;
  sendfile    on;
  keepalive_timeout  65;
  server {
    listen     443;
    # 证书绑定的域名
    server_name  xxxxx;
    # 证书文件名称,亲测这里使用.pem和.crt的证书文件都可以
    ssl_certificate xxxx.pem;
    # 由于版本问题，部分版本配置文件需加上ssl on
    ssl on;
    #私钥文件名称
    ssl_certificate_key xxx.key;
    ssl_session_timeout 5m;
    ssl_protocols tlsv1 tlsv1.1 tlsv1.2;
    ssl_ciphers ecdhe-rsa-aes128-gcm-sha256:high:!anull:!md5:!rc4:!dhe;
    ssl_prefer_server_ciphers on;
    location / {
      root   html;
      index  index.html index.htm;
    }
 
    #error_page  404        /404.html;
 
    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
      root   html;
    }
 
  location /ctp/{
    # 填写要转发的服务器地址和端口
    proxy_pass http://ip:port;
  }
    
  }
}

location /ctp/{
      # 填写要转发的服务器地址和端口
      proxy_pass http://ip:port;
      proxy_set_header upgrade $http_upgrade;
      proxy_set_header connection 'upgrade';
    }