OpenSSL生成本地https测试证书_privkey.pem-CSDN博客
1 使用git来生成密钥和证书
1. 打开git bash 切换到指定目录生成
2. openssl genrsa -out privkey.pem 1024/2048 (1024或2048) 生成privkey.pem
3. openssl req -new -x509 -key privkey.pem -out server.pem -days 365 生成server.pem 365证书有效时间
4. 按顺序填写需要的信息, 建议填写域名,但是全部不填写也可以生成
5. 现在目录下面就有了 server.pem 和 privkey.pem
2 使用密钥和证书开启live server的https服务
打开vscode的setting.json,在一级目录下追加以下内容
"liveServer.settings.https": {
"enable": true,
"cert": "C:\\Users\\27843\\cert\\server.pem", // 证书
"key": "C:\\Users\\27843\\cert\\privkey.pem", // 私钥
"passphrase": ""
},
"liveServer.settings.AdvanceCustomBrowserCmdLine": "",
"liveServer.settings.host": "127.0.0.1", // IP (可选)
"liveServer.settings.port": 5500 // 端口 (可选)
3 开启nginx的https服务
server {
listen 443 ssl;
server_name localhost;
ssl_certificate C:\Users\27843\cert\server.pem;
ssl_certificate_key C:\Users\27843\cert\privkey.pem;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root C:\Users\27843\Desktop\dahong\视频回传1;
index index.html index.htm;
try_files $uri $uri/ /index.html;
}
location /webrtc {
proxy_pass 'https://192.168.0.233:6080/video/index/api/webrtc';
}
}