amazon-web-services - 使用 Gandi.net SSL 证书的 AWS SSL 配置

Question

sudo mkdir /etc/nginx/ssl

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt

成功创建ngnix.key和ngnix.crt后

server {
        listen 80 default_server;
        listen [::]:80 default_server ipv6only=on;

        listen 443 ssl;

        root /usr/share/nginx/html;
        index index.html index.htm;

        server_name your_domain.com;
        ssl_certificate /etc/nginx/ssl/nginx.crt;
        ssl_certificate_key /etc/nginx/ssl/nginx.key;

        location / {
                try_files $uri $uri/ =404;
        }
}

sudo service nginx restart

我已经生成了 .crt 文件和 .key 文件，但经过上述过程后，证书在域上无效，请帮助在 aws ec2 实例中逐步配置。

Answer 1

Nginx 使用 'Host' header 进行 server_name 匹配。您的代码段中似​​乎缺少 default_server。

server {
 server_name _yourdomain.com;
 listen 80 default_server ipv6only=on;
 listen 443 ssl default_server;
 ssl_certificate /etc/nginx/ssl/nginx.crt;
 ssl_certificate_key /etc/nginx/ssl/nginx.key;
 return 404; # or whatever
 }