By default, Nginx supports only one SSL certificate per IP address. Multiple IP addresses are required to configure multiple SSL certificates. When public IP addresses are limited, you can use the TLS Server Name Indication extension (SNI, RFC 6066), which allows the browser to send the requested server name, that is, the Host, during the SSL handshake, so that Nginx can find the SSL configuration of the corresponding server. The configuration steps are as follows: 1. Check whether Nginx supports TLS $ nginx -V ... TLS SNI support enabled ... 2. If TLS SNI support disable occurs, you need to upgrade the openssl version and recompile nginx. The specific steps are as follows: First download openssl (version 1.0.1h is recommended) #wget http://www.openssl.org/source/openssl-1.0.1h.tar.gz Download Nginx #wget http://nginx.org/download/nginx-1.9.9.tar.gz Unzip openssl #tar -zxvf openssl-1.0.1h.tar.gz Unzip nginx and compile #tar -zxvf nginx-1.9.9.tar.gz #cd nginx-1.9.9 #./configure --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module --with-ipv6 --with-openssl=../openssl-1.0.1h/ #make && make install #Check Nginx version information #/usr/local/nginx/sbin/nginx -V nginx version: nginx/1.9.9 built by gcc 4.1.2 20080704 (Red Hat 4.1.2-55) built with OpenSSL 1.0.1h 5 Jun 2014 TLS SNI support enabled configure arguments: --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module --with-ipv6 --with-openssl=../openssl-1.0.1h/ Configure the domain name certificate in Vhost server { ######### listen 80; listen 443 ssl; #listen [::]:80; server_name we.baohua.me; root /home/wwwroot/we.baohua.me; ssl on; ssl_certificate_key /home/wwwroot/cert/we.baohua.me.key; ssl_certificate /home/wwwroot/cert/we.baohua.me.crt; ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; ############### } Then, restart Nginx. The above is the full content of this article. I hope it will be helpful for everyone’s study. I also hope that everyone will support 123WORDPRESS.COM. You may also be interested in:
|
<<: How to implement navigation function in WeChat Mini Program
I would like to quote an article by Zhang Xinxu a...
Preface MRR is the abbreviation of Multi-Range Re...
The default scroll bar style in Windows is ugly, ...
Here's the thing: Everyone knows about "...
Now that we have finished the transform course, l...
There are many tools available for backing up MyS...
Due to company requirements, two nginx servers in...
Introduction: Sometimes, in order to develop a pr...
I have been depressed for a long time, why? Some t...
This article example shares the specific code of ...
Simple description Since it was built with Centos...
Preface Learn MySQL to reorganize previous non-MK...
Asynchronous replication MySQL replication is asy...
Environment: (docker, k8s cluster), continue with...
<br />The frame structure allows several web...