Nginx+Tomcat+JDK1.8 HTTP轉換成HTTPS模式

時間 2019-11-12

標籤 nginx+tomcat+jdk1.8 nginx tomcat jdk http 轉換 https 模式欄目 Nginx 简体版

原文原文鏈接

1、環境使用的是oneinstack的Version 1.6.1css

軟件版本詳細：(使用手冊)html

Nginx1.12.0
Tomcat7.0.77或8.0.43
JDK1.8.0_12一、1.7.0_80、1.6.0_45
MySQL5.6.36
Redis3.2.8
Memcached1.4.36
Jemalloc4.5.0
Pure-FTPd1.0.45

2、思路：tomcat不用配置SSL，只配置Nginxnginx

3、具體方法tomcat

1.使用阿里雲免費版DVSSL,申請方法省略，申請成功後切換cookie

2.在Nginx的安裝目錄下建立cert目錄，而且將下載的所有文件拷貝到cert目錄中。session

3.配置：jsp

server {
    listen 443;
    server_name localhost;
    ssl on;
    access_log /data/wwwlogs/access_nginx.log combined;
    root /data/wwwroot/default;
    index index.html index.htm index.jsp;
    ssl_certificate   /usr/local/nginx/conf/cert/214179206610093.pem;
    ssl_certificate_key  /usr/local/nginx/conf/cert/214179206610093.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    error_page 404 /404.html;
    error_page 502 /502.html;

    location /nginx_status {
      stub_status on;
      access_log off;
      allow 127.0.0.1;
      deny all;
    }
    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
      expires 30d;
      access_log off;
    }
    location ~ .*\.(js|css)?$ {
      expires 7d;
      access_log off;
    }
    location ~ {
      proxy_pass http://127.0.0.1:8080;
      include proxy.conf; 
    }
    location ~ /\.ht {
      deny all;
    }

}

4.重啓nginxide

附proxy.conf 內容：ui

proxy_connect_timeout 300s;
proxy_send_timeout 900;
proxy_read_timeout 900;
proxy_buffer_size 32k;
proxy_buffers 4 64k;
proxy_busy_buffers_size 128k;
proxy_redirect off;
proxy_hide_header Vary;
proxy_set_header Accept-Encoding '';
proxy_set_header Referer $http_referer;
proxy_set_header Cookie $http_cookie;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

注意：務必先確保開放了433端口阿里雲

證書到期後更新證書替換證書文件：/usr/local/nginx/conf/cert