# 一、去阿里云找个免费的SSL证书下载

![image.png](/static/img/60aa90d1ed1896f726ce32d54ef75ad6.image.webp)


![image.png](/static/img/20c212a72d4bf2e81096d85e2fa8acf2.image.webp)

购买免费三个月的证书
![image.png](/static/img/1af82c0a8176ce23730ecc482245e7a1.image.webp)

购买后，点创建证书填好信息
![image.png](/static/img/4ddf4fd4e3fd5cb0566fc04f2e276d4e.image.webp)

然后验证

![image.png](/static/img/a27b398a18214606508a150d06bf1f41.image.webp)

验证完成后，点击更多去下载证书

![image.png](/static/img/54d1a99894eb1dd2dfc6f4097940ab96.image.webp)
下载后得到这个文件

![image.png](/static/img/af1a38a27bd46ebd7a98750e6fc2195d.image.webp)

# 二、配置Nginx的HTTPS证书
## 在NGINX的conf目录下创建一个cert文件目录，然后把证书文件上传到该目录下解压


```js
mkdir /usr/local/nginx/conf/cert
```
```js
unzip 20282216_songxuan.vip_nginx.zip
```

然后修改外置的配置文件

```text
# songxuan.conf 完整配置

upstream songxuan {
    server 117.72.79.70:81;
}

# HTTP 服务 - 自动跳转到 HTTPS
server {
    listen       80;
    server_name  songxuan.vip;  # 修改为您的域名
    
    # 所有HTTP请求重定向到HTTPS
    return 301 https://$host$request_uri;
}

# HTTPS 服务
server {
    listen       443 ssl;
    server_name  songxuan.vip;  # 修改为您的域名
    
    # SSL证书配置 - 使用您现有的证书文件
    ssl_certificate      /usr/local/nginx/conf/cert/songxuan.vip.pem;   # 根据您的实际路径
    ssl_certificate_key /usr/local/nginx/conf/cert/songxuan.vip.key;   # 根据您的实际路径
    
    # SSL协议优化
    ssl_protocols        TLSv1.2 TLSv1.3;
    ssl_ciphers          ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_session_cache    shared:SSL:10m;
    ssl_session_timeout  10m;
    ssl_prefer_server_ciphers on;

    # 保留原有location配置
    location / {
        root   /usr/local/nginx/html;
        index  guoqin.html;
         proxy_pass http://songxuan;  # 按需启用
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }

    error_page   404  /guoqin.html;
    location = /guoqin.html {
        root   /usr/local/nginx/html;
    }
}

```

4.Nginx的HTTPS配置

# 一、安全设置

![image.png](/static/img/8c1d701b6d7a1679028940352a33f491.image.webp)

修改redis文件目录redis.conf
```js
vi /songxuan/redis-6.2.14/redis.conf
```

然后vi:/查找这个
```js
requirepass foobared
```
然后把#好注释掉，后面的foobared改成你的密码

![image.png](/static/img/e4b6d2eb14745688cb6b03900ffad6a1.image.webp)

最后启动redis 连接数据库

```js
redis-cli -h 192.168.201.104 -p 6379
127.0.0.1:6379> AUTH 12345678
```

![image.png](/static/img/fca0f920f39d624aa88ca874aad0a18a.image.webp)

8.redis安全设置

# 全局命令
## 列出所有的key
```js
keys *
```
注意使用，太多key时会导致卡顿，占用内存

![image.png](/static/img/dbdeed471c24bbe8dceb051cf1c3894c.image.webp)

## 判断key是否存在

```js
exists set1
```

![image.png](/static/img/24899aa3cb6652d89c0b0bc28e20135b.image.webp)


## 给key设置过期时间

```js
expire set1 20
```

![image.png](/static/img/ed8a4353c636e73a01f95e7f63ad1f61.image.webp)
## 取消过期时间

```js
persist set1
```

## 切换数据库

```js
select 0
```

![image.png](/static/img/0ccde8726b873a7438d92b47c5610620.image.webp)

## 移动key到别的数据库

```js
move set1 1
```
## 随机返回一个key

```js
randomkey
```
## 给key改名

```js
rename set1 newset1
```
## 打印信息

```js
echo message
```
## 查看key的数量

```js
dbsize
```
## 查看redis数据库信息

```js
info
```
## 查看所有redis的配置信息

```js
config get *
```
## 清空当前数据库

```js
flushdb
```
## 清空所有数据库

```js
flushall
```

7.redis命令-全局命令

# 一、先升级SSL
## 下载好最新的SSL安装包，然后解压

```js
tar -xzf openssl-3.5.2.tar.gz
```
## 进入目录
```js
cd openssl-3.5.2
```
## 指定位置执行
```js
./config --prefix=/usr/local/openssl-3.5.2 --openssldir=/usr/local/openssl-3.5.2
```
## 编译安装

```js
make
```

```js
make install
```
## 后续配置

```js
echo 'export PATH=/usr/local/openssl-3.5.2/bin:$PATH' >> ~/.bashrc
```

```js
echo 'export LD_LIBRARY_PATH=/usr/local/openssl-3.5.2/lib64:$LD_LIBRARY_PATH' >> ~/.bashrc
```

```js
source ~/.bashrc
```
## 验证是否成功
```js
/usr/local/openssl-3.5.2/bin/openssl version
```
## 如果报错，安装后再重新走一次

```js
# CentOS/RHEL系统
sudo yum install perl-IPC-Cmd perl-Text-Template

# Ubuntu/Debian系统
sudo apt-get install libipc-cmd-perl libtext-template-perl
```

# 二、升级SSH
## 由于之前是7.4现在升级成9.9，需要3.0版本以上的SSL
连接到最新版本的SSL

```js
find / -name libssl3.so
```
```js
ln -sf /usr/local/openssl-3.5.2/lib64/libssl.so.3 /usr/lib64/
ln -sf /usr/local/openssl-3.5.2/lib64/libcrypto.so.3 /usr/lib64/
```
## 刷新缓存

```js
ldconfig
```
## 环境变量配置

```js
export LD_LIBRARY_PATH=/usr/lib64:$LD_LIBRARY_PATH
echo 'export LD_LIBRARY_PATH=/usr/lib64:$LD_LIBRARY_PATH' >> ~/.bashrc
source ~/.bashrc
```
## 下载好openSSH安装包后，解压

```js
tar -zxvf openssh-9.9p2.tar.gz
```

```js
cd openssh-9.9p2
```
## 指向SSL的路径执行

```js
./configure --with-ssl-dir=/usr/lib64 --prefix=/usr/local/openssl
```
## 编译 安装

```js
make
```

```js
make install
```
## 最后重启测试，ssh -V查看

```js
systemctl restart sshd
systemctl status sshd
```

Open SSH和Open SSL升级

# 一、命令
## 查看全部元素有几个

```js
zcard yuwen
```

## 插入zset元素

```js
zadd yuwen 99 xiaoming
```

![image.png](/static/img/0f248df98c95fa69dbf55c56613f3fa4.image.webp)

## 进行排序查看
从小到大
```js
zrange yuwen 0 -1 withscores
```

![image.png](/static/img/36c1f91e35a80ab36bfa5cadf1979e51.image.webp)

从大到小

```js
ZREVRANGE yuwen 0 -1 withscores
```
![](http://songxuan.vip:81/static/img/19c12c344d3c2e1d59e747bab44b34ee.image.webp)

## 给zset元素加分

```js
zincrby yuwen 100 xiaomao
```

![image.png](/static/img/45a0f89c7cb1369e07a557edeeda00ad.image.webp)


## 查看某个元素排序
正序排第几

```js
zrank yuwen xiaomao
```
0-1-2-3

![image.png](/static/img/d672a5e165dc2634ba155836171a0a90.image.webp)


倒序排第几

```js
zrevrank yuwen xiaomao
```

![image.png](/static/img/5f989ed726b988743f560ef36bb1d1ad.image.webp)

## 查找范围之间的元素（正序）
查找分数96至99成员
```js
ZRANGEBYSCORE yuwen 96 99 WITHSCORES
```

![image.png](/static/img/48fc17d84e4e497b4f75ba3b59119988.image.webp)

## 查找范围之间的元素（倒序）
查找分数90至99成员
```js
ZREVRANGEBYSCORE yuwen 99 90 WITHSCORES
```

![image.png](/static/img/0e1d1b26c2f5889058c810f9b224f08f.image.webp)


## 删除某个元素

```js
zrem yuwen xiaoming
```
其他不常用命令
![image.png](/static/img/1863502112ef44b76644e6d386681fba.image.webp)

# 二、应用场景

![image.png](/static/img/964bab05b3fc4bb488b05f0cbae051b3.image.webp)
