使用 openssl 工具

生成自签名证书,简化流程

1
2
3
4
5
6
7
8
9
10
11
12
13
14
# openssl.cnf
[req]
default_bits       = 2048
default_md         = sha256
prompt             = no
distinguished_name = req_distinguished_name

[req_distinguished_name]
C  = CN
ST = Beijing
L  = Beijing
O  = My Organization
OU = My Organizational Unit
CN = localhost

生成自签名

1
openssl req -x509 -newkey rsa:2048 -keyout private.key -out certificate.crt -days 365 -config openssl.cnf -nodes

nginx 里面配置

1
2
3
4
5
# nginx.conf
server{
    ssl_certificate /etc/nginx/ssl/certificate.crt; # 替换为你的证书路径
    ssl_certificate_key /etc/nginx/ssl/private.key; # 替换为你的私钥路径
}