Apache搭建的SPDY服务器(Linux Mint + Apache2.2搭建SSL/HTTPS/SPDY服务器)很不爽,因为Apache只能用2.2版本,SPDY也只支持到3,不支持3.1。所以用Nginx好些。
用以下脚本安装:
-
sudo apt-get install openssl libssl-dev
-
wget http://nginx.org/download/nginx-1.5.11.tar.gz
-
tar zxvf nginx-1.5.11.tar.gz
-
wget http://zlib.net/zlib-1.2.8.tar.gz
-
tar zxvf zlib-1.2.8.tar.gz
-
cd nginx-1.5.11
-
./configure --with-http_ssl_module --with-zlib=../zlib-1.2.8 --with-http_spdy_module
-
sudo make install
然后打开/usr/local/nginx/conf/nginx.conf
搜索HTTPS server,把下面的行全部取消注释,并为listen参数加上spdy,SSL证书可以填Apache的,或者自己创建。为了让Wireshark能截包,ssl_ciphers可以改成RSA。
-
# HTTPS server
-
#
-
server {
-
listen 443 ssl spdy;
-
server_name localhost;
-
-
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
-
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
-
-
ssl_session_cache shared:SSL:1m;
-
ssl_session_timeout 5m;
-
-
#ssl_ciphers HIGH:!aNULL:!MD5;
-
ssl_ciphers RSA;
-
ssl_prefer_server_ciphers on;
-
-
location / {
-
root /home/liuhx/xtp/writable/www;
-
index index.html index.htm;
-
}
-
}
启动:
sudo /usr/local/nginx/sbin/nginx
注:Apache使用的mod_spdy支持server push,nginx还不支持。
参考:
http://dev.meettea.com/show-110-1.html
http://nginx.org/en/docs/http/ngx_http_spdy_module.html
http://nginx.org/en/docs/configure.html
(责任编辑:IT) |