Nginx – Set Nginx https (on port 443) without the certificate

certificatehttpsnginxssl-certificate

I tried to follow up this thread as much as possible but I am always getting this message:

This site can’t be reached

example.com unexpectedly closed the connection.
Try:
Checking the connection
Checking the proxy and the firewall
ERR_CONNECTION_CLOSED
ReloadHIDE DETAILS

in Chrome.

The part of the configuration I am having is this:

server {   

   listen  80;
   listen 443 default_server ssl;
   #ssl on;

    server_name example.com   www.example.com;

This is for my test website example.com on my local 127.0.0.1 computer.

Best Answer

You will have to generate a Self signed certificate or you could look into the Let's Encrypt project to get a free and publicly trusted cert.

HTTPS is for secure traffic, and you can't do the encryption without the cert for the public and private keys.

Adding a link: https://letsencrypt.org/

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

Best Answer

Related Solutions

nginx HTTPS – How to Serve HTTPS with Same Config as HTTP

NGINX Redirect – How to Rewrite All HTTP Requests to HTTPS While Maintaining Sub-Domain

Correct way in new versions of nginx

Related Topic