nginx服务器的SSL证书配置详解 nginx

先把下载好的证书丢到服务器上nginx的话有两个文件一个是.key一个是.pem结尾的两个文件位置可以随便放个人比较喜欢放到nginx目录下
配置文件

server {listen80; server_name域名; #监听443端口(必须)listen 443 ssl; #sslssl_certificate下载的证书.pem; ssl_certificate_key下载的证书.key; #协议优化(可选，优化https协议，增加安全性)ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; #自动跳转到HTTPS(可选，和下面的部分域名跳转不能同时使用)if ($server_port = 80){rewrite ^(/.*)$ https://$host$1 permanent; }location / {root/nginxDir/html/public; try_files $uri $uri/ /index.php?$query_string; index index.phpindex.html index.htm; }error_page500 502 503 504/50x.html; location = /50x.html {root/usr/share/nginx/html; }location ~ \.php$ {fastcgi_pass127.0.0.1:9000; fastcgi_indexindex.php; fastcgi_paramSCRIPT_FILENAME$document_root$fastcgi_script_name; includefastcgi_params; }}

然后检查一下nginx配置文件是否可用，显示test is successful就表示可以了
重启ngxin