Setting up nginx SSL is pretty easy. I'm running nginx/1.0.10.
Use make-ssl-cert to make your SSL certificate.
make-ssl-cert /usr/share/ssl-cert/ssleay.cnf /etc/ssl/private/zachwolfe.org.crt
Copy this file to
/etc/ssl/private/zachwolfe.org.key and
/etc/ssl/certs/zachwolfe.org.crt.
Modify
/etc/ssl/private/zachwolfe.org.key to
only include the key (as follows):
-----BEGIN CERTIFICATE-----
...key text is here....
-----END RSA PRIVATE KEY-----
Modify
/etc/ssl/certs/zachwolfe.org.crt to
only include the certificate (as follows):
-----BEGIN RSA PRIVATE KEY-----
...certificate text is here....
-----END CERTIFICATE-----
nginx setup:
File /etc/nginx/conf.d/zachwolfe.org.ssl.conf
server {
listen 443;
server_name zachwolfe.org;
ssl on;
ssl_certificate /etc/ssl/certs/zachwolfe.org.crt;
ssl_certificate_key /etc/ssl/private/zachwolfe.org.key;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root /var/www/;
index index.html index.htm;
}
}
File /etc/nginx/conf.d/zachwolfe.org.conf
server {
listen 80;
server_name zachwolfe.org;
access_log /var/log/nginx/zachwolfe.org.access.log;
location / {
root /var/www/;
index index.html index.htm;
}
