[{"data":1,"prerenderedAt":278},["ShallowReactive",2],{"content:\u002Fposts\u002F2022\u002Fsite-add-https":3,"surround:\u002Fposts\u002F2022\u002Fsite-add-https":267},{"id":4,"title":5,"body":6,"canonical":232,"categories":233,"date":235,"description":236,"draft":237,"extension":238,"image":232,"meta":239,"navigation":240,"path":241,"permalink":232,"readingTime":242,"recommend":232,"references":247,"seo":254,"sitemap":255,"stem":262,"tags":263,"type":232,"updated":235,"__hash__":266},"content\u002Fposts\u002F2022\u002Fsite-add-https.md","申请https证书并部署至nginx服务器",{"type":7,"value":8,"toc":224},"minimark",[9,13,17,24,31,37,43,49,52,55,58,63,66,70,77,80,96,99,102,110,117,122,126,129,138,149,157,160,166,169,177,180,186,200,203,212,218],[10,11,12],"p",{},"在部署了本站后，每天看着浏览器左侧的红色锁头都不是很爽，正好借着这次机会分享一下在阿里云申请 https 证书并部署至阿里云 ubuntu 服务器的过程。",[14,15,16],"h2",{"id":16},"申请",[10,18,19,20],{},"在阿里云网站查找 ssl 证书，点击点击 ",[21,22,23],"code",{"code":23},"选购ssl证书",[10,25,26],{},[27,28],"img",{"alt":29,"src":30},"","https:\u002F\u002Fbitmc.uno\u002Fpicgo\u002F679ad335c1893-78.webp",[10,32,33,34],{},"找到免费证书\n",[27,35],{"alt":29,"src":36},"https:\u002F\u002Fbitmc.uno\u002Fpicgo\u002F679ad33725d83-78.webp",[10,38,39,40],{},"如果你没有就点击购买\n",[27,41],{"alt":29,"src":42},"https:\u002F\u002Fbitmc.uno\u002Fpicgo\u002F679ad334cbec5-78.webp",[10,44,45,46],{},"购买成功后，点击创建证书，点击证书申请，在弹出的抽屉里填写你的网站信息\n",[27,47],{"alt":29,"src":48},"https:\u002F\u002Fbitmc.uno\u002Fpicgo\u002F679ad3379c627-78.webp",[10,50,51],{},"点击下一步，按照提示完成 DNS 解析。",[10,53,54],{},"验证成功后，注意查收阿里云短信\u002F邮箱发送的 ssl 证书申请成功提示。",[10,56,57],{},"成功后，点击下载对应服务的 ssl 证书文件。",[10,59,60],{},[27,61],{"alt":29,"src":62},"https:\u002F\u002Fbitmc.uno\u002Fpicgo\u002F679ad4398ad77-78.webp",[10,64,65],{},"将下载好的压缩包在本地解压待用。",[14,67,69],{"id":68},"使用-ssh-工具链接服务器上传文件至服务器","使用 ssh 工具链接服务器，上传文件至服务器",[10,71,72,76],{},[73,74,75],"strong",{},"这一步需要传输文件","，你可以和我一样使用 vscode 的 ssh 插件",[10,78,79],{},"以下是插件列表",[81,82,83,87,90,93],"ul",{},[84,85,86],"li",{},"ms-vscode-remote.remote-ssh",[84,88,89],{},"ms-vscode-remote.remote-ssh-edit",[84,91,92],{},"ms-vscode.remote-explorer",[84,94,95],{},"Natizyskunk.sftp",[10,97,98],{},"安装好后，点击侧边栏出现的图标，添加服务器即可。",[10,100,101],{},"将解压好的文件夹里的文件",[81,103,104,107],{},[84,105,106],{},"xxx.key",[84,108,109],{},"xxx.pem",[10,111,112,113,116],{},"上传至服务器 ",[21,114,115],{"code":115},"\u002Fusr\u002Fshare\u002Fnginx\u002Fcert"," 文件夹中，若无 cert 文件，手动创建该文件夹即可。",[10,118,119],{},[73,120,121],{},"这里可能会遇到权限问题，需要重新输入密码，需要关注 vscode 弹出的输入框",[14,123,125],{"id":124},"配置-nginx","配置 nginx",[10,127,128],{},"进入对应 nginx 配置文件中",[130,131,136],"pre",{"className":132,"code":134,"language":135,"meta":29},[133],"language-bash","vim \u002Fetc\u002Fnginx\u002Fsites-available\u002Fdefault\n","bash",[21,137,134],{"__ignoreMap":29},[10,139,140,141,148],{},"找到对应站点配置项，我这里是将 ",[142,143,147],"a",{"href":144,"rel":145},"http:\u002F\u002Fwww.weilog.me",[146],"nofollow","www.weilog.me"," 和 weilog.me 域名跳转至 https 服务",[130,150,155],{"className":151,"code":153,"language":154,"meta":29},[152],"language-nginx","server {\n  listen 80;\n  server_name www.weilog.me weilog.me;\n  return https:\u002F\u002F$server_name$request_uri;\n}\n","nginx",[21,156,153],{"__ignoreMap":29},[10,158,159],{},"配置 ssl 证书",[130,161,164],{"className":162,"code":163,"language":154,"meta":29},[152],"server {\n  listen 443 ssl;\n  server_name www; # 证书申请时的域名\n\n  # 这段是阿里云官网上粘贴的，注意ssl_certificate和ssl_certificate_key最好写你上传ssl证书文件的绝对路径\n  root html;\n  index index.html;\n  ssl_certificate \u002Fusr\u002Fshare\u002Fnginx\u002Fcert\u002F9001033_www.weilog.me.pem;\n  ssl_certificate_key \u002Fusr\u002Fshare\u002Fnginx\u002Fcert\u002F9001033_www.weilog.me.key;\n  ssl_session_timeout 5m;\n  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;\n  ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; #表示使用的TLS协议的类型，您需要自行评估是否配置TLSv1.1协议。\n  ssl_prefer_server_ciphers on;\n\n  location \u002F {\n    root \u002Fxxxx; # 你网站静态文件所在目录\n    index index.html index.htm;\n  }\n}\n",[21,165,163],{"__ignoreMap":29},[10,167,168],{},"配置完成后，运行",[130,170,175],{"className":171,"code":173,"language":174},[172],"language-text","nginx -t\n","text",[21,176,173],{"__ignoreMap":29},[10,178,179],{},"查看配置项是否有问题。没有报错后运行",[130,181,184],{"className":182,"code":183,"language":174},[172],"nginx -s reload\n",[21,185,183],{"__ignoreMap":29},[10,187,188,189,192,193,195,196,199],{},"重新启动 ngin 服务。这时，在浏览器输入 ",[21,190,191],{"code":191},"weilog.me"," 或 ",[21,194,147],{"code":147}," 会自动跳转至 ",[21,197,198],{"code":198},"https:\u002F\u002Fwww,weilog.me","。 而且浏览器地址栏中的红色锁头编程了灰色。",[14,201,202],{"id":202},"在配置过程中遇到的坑",[204,205,206,209],"ol",{},[84,207,208],{},"阿里云官网教程在不懂 luinx 系统的我来说比较晦涩且有一些配置项和 ubuntu 服务器有区别，在对照学习时需要注意系统是否和官网的一致",[84,210,211],{},"第三方博客省去了部分的配置细节，具体也需要对照官方教程进行补全。",[213,214,215],"blockquote",{},[10,216,217],{},"目前为止，按照我这样配置重复配置另一个域名也没有遇到问题。您可以自己去试一下，我所使用的服务器如下",[130,219,222],{"className":220,"code":221,"language":174},[172],"系统  阿里云 ubuntu 20.04\n",[21,223,221],{"__ignoreMap":29},{"title":29,"searchDepth":225,"depth":225,"links":226},4,[227,229,230,231],{"id":16,"depth":228,"text":16},2,{"id":68,"depth":228,"text":69},{"id":124,"depth":228,"text":125},{"id":202,"depth":228,"text":202},null,[234],"代码","2022-12-15 15:01:33","申请免费的 https 证书并部署至 nginx 服务",false,"md",{},true,"\u002Fposts\u002F2022\u002Fsite-add-https",{"text":243,"minutes":244,"time":245,"words":246},"4 min read",3.635,218100,727,[248,251],{"title":249,"link":250},"阿里云服务器 nginx 上部署 SSL 证书实现 https 访问","https:\u002F\u002Fxmuli.tech\u002Fposts\u002F70a6b02f\u002F",{"title":252,"link":253},"在Nginx或Tengine服务器上安装证书","https:\u002F\u002Fhelp.aliyun.com\u002Fdocument_detail\u002F98728.htm?spm=a2c4g.11186623.0.0.22fc4af0YHDew5",{"title":5,"description":236},{"loc":241,"images":256},[257,258,259,260,261],{"loc":30},{"loc":36},{"loc":42},{"loc":48},{"loc":62},"posts\u002F2022\u002Fsite-add-https",[264,265],"服务器","Nginx","O71Adx9bEqpbQ7VnLQsx06GozCVhzuBcUZvtSf0xmEI",[268,273],{"title":269,"path":270,"stem":271,"date":272,"type":232,"children":-1},"nestjs入门","\u002Fposts\u002F2022\u002Fnestjs-setup","posts\u002F2022\u002Fnestjs-setup","2022-12-12 15:23:45",{"title":274,"path":275,"stem":276,"date":277,"type":232,"children":-1},"log4js node日志管理","\u002Fposts\u002F2022\u002Fnode-log4js","posts\u002F2022\u002Fnode-log4js","2022-12-19 14:45:33",1789642595610]