怎么配置 SSL 貌似好麻烦的样子。

楼主用什么系统?

@jingxuetao Ubuntu 14.04 使用 Nginx

@jingxuetao 根本看不懂那几个密钥啊

server {
    listen 80;
    server_name  jingxuetao.com www.jingxuetao.com;

    #charset koi8-r;
    #access_log  /var/log/nginx/log/host.access.log  main;

    location / {
        #rewrite ^(.*) https://$server_name$1 permanent;
        #return 301 https://$server_name$request_uri;
        return 301 https://jingxuetao.com$request_uri;
    }
}

上面是 HTTP 文件配置,default.conf

server {
    listen        443 ssl http2;
    server_name   jingxuetao.com;
    server_tokens        off;

    #SSL配置
    ssl                   on;
    ssl_certificate       /etc/nginx/cert.crt;#证书路径
    ssl_certificate_key   /etc/nginx/cert.key;

    add_header Strict-Transport-Security "max-age=31536000;";
    add_header  X-Frame-Options  deny;
    add_header  X-Content-Type-Options  nosniff;

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_pass         http://127.0.0.1:2368;
        client_max_body_size    5m;
    }
}

上面是 HTTPS 文件配置 ssl.conf 文件.

``
server { listen 80; server_name jingxuetao.com www.jingxuetao.com;
#charset koi8-r;
#access_log /var/log/nginx/log/host.access.log main;

  location / {
	#rewrite ^(.*) https://$server_name$1 permanent;
	#return 301 https://$server_name$request_uri;
	return 301 https://jingxuetao.com$request_uri;
  }
}

上面是HTTP文件配置,default.conf
server { listen 443 ssl http2; server_name jingxuetao.com; server_tokens off;
#SSL 配置
ssl on;
ssl_certificate /etc/nginx/cert.crt;#证书路径
ssl_certificate_key /etc/nginx/cert.key;

  add_header Strict-Transport-Security "max-age=31536000;";
  add_header  X-Frame-Options  deny;
  add_header  X-Content-Type-Options  nosniff;

  location / {
	  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	  proxy_set_header Host $http_host;
	  proxy_set_header X-Forwarded-Proto $scheme;
	  proxy_pass         http://127.0.0.1:2368;
	  client_max_body_size    5m;
  }
} ```

上面是 HTTPS 文件配置 ssl.conf 文件.

网上搜教程,一搜一大堆.

楼主不是玩 [pjax] 了么....

@jingxuetao 默认安装的 nginx 竟然没有 ssl 模块

@zonghua 是的,得新建一个...

@participants 开启 SSL 后没有渲染样式表是怎么回事 https://applehater.cn/

控制台输出

Resource interpreted as Stylesheet but transferred with MIME type text/plain

include mime.types 解决