配置要求：
client:192.168.4.10 proxy:192.168.4.5(eth0) 192.168.2.5(eth1) web1:192.168.2.100 web2:192.168.2.200 1.1 搭建nginx服务器 proxy: ]# yum -y install gcc pcre-devel openssl-devel ]# useradd -s /sbin/nologin nginx ]# ./configure \（安装包内） > --prefix=/usr/local/nginx \ > --user=nginx \ > --group=nginx \ > --with-http_ssl_module //开启SSL加密功能 ]# make && make install ]# systemctl stop httpd ]# systemctl disable httpd ]# ln -s /usr/local/nginx/sbin/nginx /sbin/ ]# nginx ]# netstat -anptu | grep nginx ]# curlhttp://192.168.4.5 1.2 升级nginx服务器 ]# nginx -s stop ]# mv /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak ]# ./configure \ > --prefix=/usr/local/nginx \ > --user=nginx \ > --group=nginx \ > --with-http_ssl_module ]# make && make install ]# cp objs/nginx /usr/local/nginx/sbin/(安装包内） ]# make upgrade //升级 ]# nginx ]# nginx -V client 测试： ]# firefoxhttp://192.168.4.5 2. 配置用户认证 ]# vim /usr/local/nginx/conf/nginx.conf ... server_name localhost; auth_basic "Input Password"; auth_basic_user_file "/usr/local/nginx/pass"; ... ]# yum -y install httpd-tools ]# htpasswd -c /usr/local/nginx/pass tom1 ]# htpasswd /usr/local/nginx/pass tom2 //追加用户，不使用-c选项 ]# cat /usr/local/nginx/pass tom1:$apr1$2kaE07z6$vhGcS7rLiyIZrvsOIV8Zs0 tom2:$apr1$ob0nlqNt$o5Sb1PNK3RkbqRW73.kBB/ ]# nginx -s reload client测试： ]# firefoxhttp://192.168.4.5（要输入账户、密码） 3.基于域名的虚拟主机 ]# vim /usr/local/nginx/conf/nginx.conf 配置了用户认证 server { listen 80; server_name ; auth_basic "Input Password"; auth_basic_user_file "/usr/local/nginx/pass"; location / { root html; index index.html index.htm; } 未配置用户认证 erver { listen 80; server_name ; location / { root www; index index.html index.htm; } ]# mkdir /usr/local/nginx/www ]# echo "www" > /usr/local/nginx/www/index.html ]# nginx -s reload client测试： ]# vim /etc/hosts 192.168.4.5 ]# firefox(输入用户名，密码访问） ]# firefox; 4.SSL虚拟主机 ]# cd /usr/local/nginx/conf ]# openssl genrsa > cert.key //生成私钥 ]# openssl req -new -x509 -key cert.key > cert.pem //生成证书 ]# ls cert.key cert.pem ... ]# vim /usr/local/nginx/conf/nginx.conf server { listen 443 ssl; server_name ; ssl_certificate cert.pem; ssl_certificate_key cert.key; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; ssl_ciphers HIGH:!aNULL:!MD5; ssl_prefer_server_ciphers on; location / { root html; index index.html index.htm; } } ]# nginx -s reload client: ]# vim /etc/hosts 192.168.4.5 ]# firefox//信任证书后可以访问
