使用mkcert生成本地受信任的SSL on CentOS7

wget -O mkcert https://github.com/FiloSottile/mkcert/releases/download/v1.3.0/mkcert-v1.3.0-linux-amd64

chmod +x mkcert

./mkcert -install

./mkcert 127.0.0.1

cp 127.0.0.1* /etc/nginx/

vim test.conf

server {
listen 80;
server_name 127.0.0.1;
root /usr/share/nginx/html;
}

server {
listen 443 ssl;
root /usr/share/nginx/html;
server_name 127.0.0.1;
ssl_certificate /etc/nginx/127.0.0.1.pem;
ssl_certificate_key /etc/nginx/127.0.0.1-key.pem;
}

reload nginx