https linux Nginx单独开启SSL模块和HTTP2模块，无需重新覆盖安装

用WordPress搭建的个人网站启动时报错提示如下：

Nginx如果未开启SSL模块，配置Https时提示错误(the "ssl" parameter requires ngx_http_ssl_module)

[emerg] the ‘http2’ parameter requires ngx_http_v2_module in xxx.conf the ‘http2’ parameter requires ngx_http_v2_module in xxx.conf:6

原因是没有安装HTTPS模块和HTTP2模块，那就安装下：

nginx缺少http_ssl_module模块，编译安装的时候带上–with-http_ssl_module配置就行了，HTTP2的也是同理，--with-http_v2_module。但是现在的情况是我的nginx已经安装过了，怎么添加模块???

去官网下载NGINX的最新包，上传到服务器，解压，进去NGINX目录，运行添加配置的命令，编译。

1、查看nginx原有的模块

/usr/local/nginx/sbin/nginx -V

我这个已经安装过了，所以会显示出来 

 2、那么我们的新配置信息就应该这样写，运行下面的命令即可，等配置完。

./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_v2_module 

3、编译【特别注意】这里不要进行make install，否则就是覆盖你之前的安装

make

4、备份原有已安装好的nginx

cp /usr/local/nginx/sbin/nginx /usr/local/nginx/sbin/nginx.bak

5、将刚刚编译好的nginx覆盖掉原有的nginx（这个时候【特别注意】这里nginx要停止状态）

cp ./objs/nginx /usr/local/nginx/sbin/

6、启动nginx，仍可以通过命令查看是否已经加入成功

我这个是配置了开机自动的，具体配置可查看我之前写的文章：CentOS7.9.2009离线安装NGINX1.20.2版（附资源包）_QC班长的博客-CSDN博客_pcre 安装包

我自己的Nginx 配置Http和Https共存 和HTTP2的例子，

HTTP2只对HTTPS生效，所以要同时配置，HTTP2的加载速度比HTTP1.1快很多 

最后附下完整的NGINX配置文件吧，由于用的是WordPress后台的是PHP的 

user nginx nginx;

worker_processes auto;

worker_rlimit_nofile 51200;

error_log logs/error.log;

error_log logs/error.log notice;

error_log logs/error.log info;

#pid logs/nginx.pid;

events {

use epoll;

worker_connections 51200;

multi_accept on;

}

http {

include mime.types;

default_type application/octet-stream;

server_names_hash_bucket_size 128;

client_header_buffer_size 32k;

large_client_header_buffers 4 32k;

client_max_body_size 1024m;

client_body_buffer_size 10m;

sendfile on;

tcp_nopush on;

keepalive_timeout 120;

server_tokens off;

tcp_nodelay on;

fastcgi_connect_timeout 300;

fastcgi_send_timeout 300;

fastcgi_read_timeout 300;

fastcgi_buffer_size 64k;

fastcgi_buffers 4 64k;

fastcgi_busy_buffers_size 128k;

fastcgi_temp_file_write_size 128k;

fastcgi_intercept_errors on;

#Gzip Compression

gzip on;

gzip_buffers 16 8k;

gzip_comp_level 6;

gzip_http_version 1.1;

gzip_min_length 256;

gzip_proxied any;

gzip_vary on;

gzip_types

text/xml application/xml application/atom+xml application/rss+xml application/xhtml+xml image/svg+xml

text/javascript application/javascript application/x-javascript

text/x-json application/json application/x-web-app-manifest+json

text/css text/plain text/x-component

font/opentype application/x-font-ttf application/vnd.ms-fontobject

image/x-icon;

gzip_disable "MSIE [1-6]\.(?!.*SV1)";

server {

listen 80;

listen [::]:80;

listen 443 ssl http2;

listen [::]:443 ssl http2;

ssl_certificate /usr/local/nginx/conf/cert/ibestidea.com.pem;

ssl_certificate_key /usr/local/nginx/conf/cert/ibestidea.com.key;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

ssl_ciphers TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_prefer_server_ciphers on;

ssl_session_timeout 10m;

ssl_session_cache builtin:1000 shared:SSL:10m;

ssl_buffer_size 1400;

add_header Strict-Transport-Security max-age=15768000;

ssl_stapling on;

ssl_stapling_verify on;

server_name _;

access_log /usr/local/nginx/logs/wordpress_nginx.log combined;

index index.html index.htm index.php;

root /usr/local/nginx/html/wordpress;

if ($scheme = http ) {return 301 https://$host$request_uri;}

location / {

try_files $uri $uri/ /index.php?$args;

}

rewrite /wp-admin$ $scheme://$host$uri/ permanent;

location ~* ^/wp-content/uploads/.*\.php$ {

deny all;

}

location ~ [^/]\.php(/|$) {

#fastcgi_pass remote_php_ip:9000;

fastcgi_pass unix:/run/php-fpm/www.sock;

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

fastcgi_param QUERY_STRING $query_string;

fastcgi_param REQUEST_METHOD $request_method;

fastcgi_param CONTENT_TYPE $content_type;

fastcgi_param CONTENT_LENGTH $content_length;

fastcgi_param SCRIPT_NAME $fastcgi_script_name;

fastcgi_param REQUEST_URI $request_uri;

fastcgi_param DOCUMENT_URI $document_uri;

fastcgi_param DOCUMENT_ROOT $document_root;

fastcgi_param SERVER_PROTOCOL $server_protocol;

fastcgi_param REQUEST_SCHEME $scheme;

fastcgi_param HTTPS $https if_not_empty;

fastcgi_param GATEWAY_INTERFACE CGI/1.1;

fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;

fastcgi_param REMOTE_ADDR $remote_addr;

fastcgi_param REMOTE_PORT $remote_port;

fastcgi_param SERVER_ADDR $server_addr;

fastcgi_param SERVER_PORT $server_port;

fastcgi_param SERVER_NAME $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect

fastcgi_param REDIRECT_STATUS 200;

}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {

expires 30d;

access_log off;

}

location ~ .*\.(js|css)?$ {

expires 7d;

access_log off;

}

location ~ /(\.user\.ini|\.ht|\.git|\.svn|\.project|LICENSE|README\.md) {

deny all;

}

}

}

 参考文献

0、3.1 HTTP 常见面试题 | 小林coding

1、Nginx如果未开启SSL模块，配置Https时提示错误(the "ssl" parameter requires ngx_http_ssl_module)_夏婉妹妹的博客-CSDN博客

2、[nginx] [emerg] the ‘http2‘ parameter requires ngx_http_v2_module_周雪zzZ的博客-CSDN博客

相关文章

 您阅读本篇文章共花了：