# gmNginx

**Repository Path**: supergame/gm-nginx

## Basic Information

- **Project Name**: gmNginx
- **Description**: 国密SSL实验室提供的部署国密Nginx服务的相关SDK
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: master
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 3
- **Created**: 2025-06-05
- **Last Updated**: 2025-06-05

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# 国密Nginx部署指南
## zlib安装
- 解压zlib.tar.gz
	>- tar -zxvf zlib.tar.gz
- 进入zlib目录, 分别执行以下命令
	>- ./configure
	>- sudo make
	>- sudo make install
## pcre安装
- 解压pcre-8.45.zip
	>- unzip pcre-8.45.zip
- 进入pcre目录, 分别执行以下命令
	>- ./configure
	>- sudo make
	>- sudo make install
## 国密版本OpenSSL安装
- 解压openssl到指定目录
	>- tar -zxvf gmssl_openssl_1.1_b2024_x64_1.tar.gz -C /usr/local

## 国密版本Nginx安装与配置
- 解压 nginx-1.24.0.tar.gz
	>- tar -zxvf nginx-1.24.0.tar.gz
- 进入nginx目录
- 将auto/lib/openssl/conf文件中 $OPENSSL/.openssl/全部修改为 $OPENSSL/并保存
- 然后分别执行以下命令编译安装
	>- ./configure --without-http_gzip_module --with-http_ssl_module --with-http_stub_status_module --with-http_v2_module --with-stream --with-file-aio --with-openssl="/usr/local/gmssl"
	>- sudo make
	>- sudo make install
- 默认会安装到这个目录下 /usr/local/nginx
- 将 sm2.SmallWolf.zip 拷贝到 /usr/local/nginx/conf 目录下并解压 
- 修改nginx配置文件 /usr/local/nginx/conf/nginx.conf 中的server项
- ```
	server {
        listen       443 ssl;
        server_name  localhost;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:AES128-SHA:DES-CBC3-SHA:ECC-SM4-CBC-SM3:ECC-SM4-GCM-SM3;
        ssl_verify_client off;


        ssl_certificate      sm2.SmallWolf.enc.crt.pem;
        ssl_certificate_key  sm2.SmallWolf.enc.key.pem;

        ssl_certificate      sm2.SmallWolf.sig.crt.pem;
        ssl_certificate_key  sm2.SmallWolf.sig.key.pem;

        location / {
            root   html;
            index  index.html index.htm;
        }
    }
	```
- 然后进入 /usr/local/nginx/sbin目录启动nginx