workspace/notes/前端开发/https/nginx_https配置.md

mkcer (本地)

下载

下载地址：https://github.com/FiloSottile/mkcert/releases

根据系统下载即可

安装

打开 cmd 执行命令

mkcert-v1.4.4-windows-amd64.exe -install

点击 是 即可

安装成功后会提示

生成自签证书

执行命令

mkcert-v1.4.4-windows-amd64.exe localhost 127.0.0.1 ::1 192.168.1.131

成功提示

这样就成功啦，然后生成的证书在 mkcert-v1.4.4-windows-amd64.exe 的同级目录下

配置 nginx

配置文件参考

#user  nobody;
worker_processes  1;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  65;

    # ✅ HTTP 服务监听 8088
    server {
        listen       8088;
        server_name  localhost;

        location / {
            root   html;
            index  index.html index.htm;
        }

        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }

    # ✅ HTTPS 服务监听 443（使用 mkcert 生成的证书）
    server {
        listen       443 ssl;
        server_name  192.168.1.131;

        ssl_certificate      D:/Devtool/localhost+3.pem;
        ssl_certificate_key  D:/Devtool/localhost+3-key.pem;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;  # 若是 Vue 项目请替换为 dist 目录路径
            index  index.html index.htm;
            try_files $uri $uri/ /index.html;
        }
    }
}

避免不安全提示

win10系统：

certmgr /c /add "localhost+3.pem" /s root

win7系统：

set CUR_PATH=%CD%
certutil -addstore -f -enterprise -user root "ca.pem"

openssl

参考：https://xinyufeng.net/2024/08/16/%E5%9C%A8-Windows-%E4%B8%8A%E7%94%9F%E6%88%90%E6%9C%AC%E5%9C%B0-SSL-%E8%AF%81%E4%B9%A6%E5%B9%B6%E4%BD%BF%E7%94%A8-HTTPS-%E8%AE%BF%E9%97%AE%E6%9C%AC%E5%9C%B0-Nginx-%E6%9C%8D%E5%8A%A1%E5%99%A8/