#####Dependency: openssl#####
- Create directory:
sudo mkdir /etc/nginx/ssl
cd /etc/nginx/ssl
- Create private server key:
sudo openssl genrsa -des3 -out server.key 1024
- Create certificate signing request
sudo openssl req -new -key server.key -out server.csr
- Remove passphrase so nginx doesn't ask for it everytime you start it:
sudo cp server.key server.key.org
sudo openssl rsa -in server.key.org -out server.key
- Sign your certificate:
sudo openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
- Setup certificate in /etc/nginx.conf:
#HTTPS server
server {
listen 443;
server_name example.com;
root /usr/share/nginx/www;
index index.html index.htm;
ssl on;
ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;
}