nginx增加ssl服务方法

1.将申请到的ssl加密证书文件拷贝到nginx的conf目录下

如：server.pem、server.key

2.vim nginx.conf

例子：

server {
listen       443 ssl;
#listen       80;
server_name  www.test.com;
ssl_certificate      server.pem;
ssl_certificate_key  server.key;
ssl_session_cache    shared:SSL:1m;
ssl_session_timeout  10m;

ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers RC4:HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;

root  /mnt/html/test;
index  index.php index.html index.htm;
access_log    logs/test.com_access.log;
error_log     logs/test.com_error.log debug;

error_page   500 502 503 504  /50x.html;

location = /50x.html {
root   /mnt/html;
}
#重定向
location / {
if (!-e $request_filename) {
rewrite ^/(.*)$ /index.php/$1 last;
}
}

location ~ \.php {
fastcgi_pass   127.0.0.1:9000;
fastcgi_index  index.php;
include        fastcgi.conf;
}
}

3.配置http重定向到https

server {
listen  80;
server_name www.test.com test.com;

rewrite ^(.*)$  https://www.test.com$1 permanent;
}

4.重启nginx 搞定