主页 / server / 问题 / 770505
Accepted
dotslash
Asked: 2016-04-15 22:37:52 +0800 CST

如何使用 Nginx 从 http(s)://(www.)example.com 重定向到 https://example.com？

  • 772

正如标题所述。

我发现了另一个有用的 Q/A，但它没有显示如何在 Nginx 设置中正确执行，我的意思是parameters. 他可能的意思是https://exmaple.com在被重定向到 之前应该有一个有效的握手https://www.example.com。在我的场景中https://www.example.com效果很好，但https:example.com不能重定向到https://www.example.com.

server {
    listen 80;
    server_name example.com www.example.com;
    rewrite ^ https://example.com$request_uri? permanent;
}

server {
    listen 443;
    server_name example.com;

    ssl on;
    # some other settings, correctly

}

但是，它在浏览http://example.com时被重定向到，https://example.com但它以 chrome 显示

This site can’t be reached 
example.com unexpectedly closed the connection.
ERR_CONNECTION_CLOSED```

我想全部重定向到https://example.com，如何？

- 更新 -

/var/log/nginx/access.log节目_

"GET / HTTP/2.0" 301 216 "-"

没有错误/var/log/nginx/error.log

非常感谢！！！

linux ssl nginx https ssl-certificate

2 个回答

  1. Best Answer

    所以你想将所有流量重定向到https://www.example.com？

    我认为您在listen 443 ssl中缺少ssl指令；

    请参阅下面的示例

    使用 HTTPS 的主要配置 - www.example.com

    server {
    listen 443 ssl;
    server_name www.example.com;
    ssl_certificate /path/ssl.crt
    other ssl config....
}

    将 HTTPS 裸域重定向到 WWW

    server {
        listen 443 ssl;
        server_name example.com;
        return 301 https://www.example.com$request_uri;
    }

    重定向所有 HTTP

    server {
        listen 80;
        server_name example.com www.example.com;
        return 301 https://www.example.com$request_uri;
    }
    • 0

  2. 像这样

    # Redirect all variations to https://www domain
server {
  listen 80;
  access_log  /var/log/nginx/hr.access.log main buffer=128k flush=60;
  server_name example.com www.example.com;
  return 301 https://example.com$request_uri;
}

server {
  listen 443 ssl http2;
  server_name www.example.com;

  ssl_certificate /var/lib/acme/certs/x/fullchain;
  ssl_certificate_key /var/lib/acme/certs/x/privkey;

  access_log  /var/log/nginx/hr.access.log main buffer=128k flush=60;

  # Set up preferred protocols and ciphers. TLS1.2 is required for HTTP/2
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_prefer_server_ciphers on;
  ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;

  # This is a cache for SSL connections
  ssl_session_cache shared:SSL:2m;
  ssl_session_timeout 60m;

  return 301 https://example.com$request_uri;
}
    • -1

相关问题