Nginx配置SSL和WSS步骤介绍

wget http://nginx.org/download/nginx-1.9.0.tar.gz

yum install gcc-c++
yum install -y openssl openssl-devel

yum install -y pcre pcre-devel

yum install -y zlib zlib-devel

tar -zvxf nginx-1.9.0.tar.gz

cd nginx-1.9.0
./configure --with-http_ssl_module

makemake Install

whereis nginx

cd /usr/local/nginx/sbin./nginx

 
#user  nobody;
worker_processes  1;
 
#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    server {
        listen       443;
        # 证书绑定的域名
        server_name  xxxxx;
	    # 证书文件名称,亲测这里使用.pem和.crt的证书文件都可以
	    ssl_certificate xxxx.pem;
        # 由于版本问题，部分版本配置文件需加上ssl on
	    ssl on;
	    #私钥文件名称
	    ssl_certificate_key xxx.key;
        ssl_session_timeout 5m;
	    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
	    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
	    ssl_prefer_server_ciphers on;
        location / {
            root   html;
            index  index.html index.htm;
        }
 
        #error_page  404              /404.html;
 
        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
 
	location /ctp/{
        # 填写要转发的服务器地址和端口
        proxy_pass http://ip:port;
	}
      
    }
}

location /ctp/{
            # 填写要转发的服务器地址和端口
            proxy_pass http://ip:port;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection 'Upgrade';
        }