nginx 配置SSH

1、上传ssl证书到服务器/usr/local/nginx/ssl/xxx.pfx 2、执行命令： openssl pkcs12 -in /usr/local/nginx/ssl/xxxx.pfx -nocerts -nodes -out /usr/local/nginx/ssl/xxxx.key 输入密码： 3、执行命令： openssl pkcs12 -in /usr/local/nginx/ssl/xxxx.pfx -clcerts -nokeys -out /usr/local/nginx/ssl/xxxx.crt 输入密码： 4、修改nginx.conf

server { listen 443; server_name xxxx.com.cn; index index.html index.htm index.php; root /home/wwwroot/xxxx; ssl on; ssl_certificate /usr/local/nginx/ssl/xxxx.crt; ssl_certificate_key /usr/local/nginx/ssl/xxxx.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; include enable-php.conf; location / { if (!-e $request_filename) { rewrite ^/(.*)$ /?s=$1 last; } } access_log /home/wwwlogs/access.log; }

5、重载nginx nginx -t nginx -s reload

但是，安装后安卓微信访问时白屏，安卓浏览器访问时，提示是“不安全的证书”。 是因为“证书链不完整”。在cret中添加“中级证书”后就好了