https的配置

nginx 配置全站 https1 . 在nginx目录下创建cert目录拷贝下面2个文件到cert目录下证书文件: xxx.pem证书私钥; xxx..key2 . 修改虚拟主机配置文件server { ???//--- 80 端口改为 443 ssl ???# listen 80; ???listen ?443 ssl; ???//--- 80 端口改为 443 ssl ???server_name ?www.ktvll.com; ???index index.html index.htm index.php; ???root /www/ktvll; ???include /alidata/www/ktvll/.htaccess; ???//-----------新增 https 部分---------------- ???ssl_certificate ?????/nginx/cert/21431193.pem; ???ssl_certificate_key ?/nginx/cert/21431193.key; ???ssl_session_timeout 5m; ???ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ???ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ???ssl_prefer_server_ciphers on; ???//-----------新增 https 部分---------------- ???location ~ \.php { ???????fastcgi_pass ?127.0.0.1:9000; ???????fastcgi_index index.php; ???????include fastcgi.conf; ???????fastcgi_split_path_info ^(.+\.php)(.*)$; ???????fastcgi_param PATH_INFO $fastcgi_path_info; ???} ???location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$ ???{ ???????expires 30d; ???} ???location ~ .*\.(js|css)?$ ???{ ???????expires 1h; ???} ???access_log ?/alidata/log/nginx/access/default.log; ???autoindex ???off; ???error_page 404 = index.php;}# HTTP 全部跳转到 HTTPSserver { ???listen 80; ???server_name www.ktvll.com; ???return 301 https://$server_name$request_uri;}