安裝ssl證書

1.可安裝一次個人版 免費證書

2.進入頁面購買即可

3.綁定域名，選擇自動配置，提交成功

4.等待審覈通過後，下載證書

5.將證書放在服務器中

6.在nginx中加入如下配置，需在服務器控制檯和寶塔面板中開詞443端口

listen 443 ssl;

server_name XXXXX.com;//域名

ssl on;

ssl_certificate  3247122_XXX_nginx/3247122_xxx.pem;//pem路徑

ssl_certificate_key  3247122_XXX_nginx/3247122_xxx.key;//key路徑

ssl_session_timeout 5m;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on;

server_name m.natboo.com;

    index index.php index.html index.htm default.php default.htm default.html;

    root /www/wwwroot/www.domain.com/public;

    #error_page 404/404.html;

    error_page 404 /404.html;

    error_page 502 /502.html;

 

    include enable-php-71.conf;

    include /www/server/panel/vhost/rewrite/www.domain.com.conf;

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

        expires      30d;

        access_log off;

    }

    location ~ .*\.(js|css)?$

    {

        expires      12h;

        access_log off;

    }

    access_log  /www/wwwlogs/www.domain.com.log;

}