PHP框架怎么配置HTTPS访问_PHP框架SSL证书配置方法

• 生成私钥和CSR：运行openssl req -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr
• 提交CSR给CA，下载签发的证书文件（如domain.crt和中间证书）
• 将证书和私钥合并为服务器可用格式，通常保存在/etc/ssl/certs/目录下

server {
    listen 443 ssl;
    server_name your-domain.com;

    ssl_certificate /etc/ssl/certs/domain.crt;
    ssl_certificate_key /etc/ssl/certs/domain.key;

    root /var/www/your-project/public;
    index index.php;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.1-fpm.sock;
    }
}

<VirtualHost *:443>
    ServerName your-domain.com
    DocumentRoot /var/www/your-project/public

    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/domain.crt
    SSLCertificateKeyFile /etc/ssl/private/domain.key

    <Directory "/var/www/your-project/public">
        AllowOverride All
        Require all granted
    </Directory>
</VirtualHost>

• Nginx：sudo systemctl restart nginx
• Apache：sudo a2enmod ssl && sudo systemctl restart apache2

• 设置环境变量APP_URL=https://your-domain.com
• 在中间件或入口文件中强制安全连接，例如Laravel可在AppServiceProvider中添加：

if ($this->app->environment('production')) {
    $this->app['request']->server->set('HTTPS', true);
}

session_set_cookie_params([
    'secure' => true,
    'httponly' => true,
    'samesite' => 'Strict'
]);

server {
    listen 80;
    server_name your-domain.com;
    return 301 https://$host$request_uri;
}

<VirtualHost *:80>
    ServerName your-domain.com
    Redirect permanent / https://your-domain.com/
</VirtualHost>