|
Nginx : SSL Settings
2015/08/18 |
|
Enable SSL setting to use SSL connection.
|
|
| [1] | |
| [2] | Configure Nginx. |
|
[root@www ~]#
vi /etc/nginx/nginx.conf # add into "server" section
server {
listen 80 default_server;
listen [::]:80 default_server;
listen 443 ssl;
server_name www.srv.world;
root /usr/share/nginx/html;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE+RSAGCM:ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!aNULL!eNull:!EXPORT:!DES:!3DES:!MD5:!DSS;
ssl_certificate /etc/pki/tls/certs/server.crt;
ssl_certificate_key /etc/pki/tls/certs/server.key;
systemctl restart nginx |
| [3] | If Firewalld is rinning, allow HTTPS service. HTTPS uses 443/TCP. |
|
[root@www ~]# firewall-cmd --add-service=https --permanent success [root@www ~]# firewall-cmd --reload success |
| [4] | Access to the default page with HTTPS to make sure it works normally. |
|