阿里云配置ssl证书

一、申请证书和下载证书（阿里云申请）

二、在nginx服务器上配置ssl证书

1.检查服务器是否安装openssl

2.在nginx conf 文件夹创建 cret 文件，放置证书

[root@web conf]# mkdir cert

3.在需要的域名vhost主机下面配置ssl

[root@web vhost]# vi 80.conf

 server {
     listen 80;
     server_name app.test.com;

     location / {
         root $root_path;
         index index.html index.htm index.php;
         if (!-e $request_filename) {
            # rewrite ^(.*)$ /index.php?s=/$1 last;
                 rewrite ^/index.php(.*)$ /index.php?s=$1 last;
          rewrite ^(.*)$ /index.php?s=$1 last;

         }
     }
     error_page 500 502 503 504 /50x.html;
     location = /50x.html {
         root $root_path;
     }

     location ~ \.php$ {
         root $root_path;
         #fastcgi_pass 127.0.0.1:9000;
                 fastcgi_pass unix:/tmp/php-cgi.sock;
         fastcgi_index index.php;
         include fastcgi.conf;
     }
 }
 server {
     listen 443;
     server_name app.test.com;
     ssl on;
     ssl_certificate    /usr/local/nginx/conf/cert/21485836dsfdsf0846.pem;
     ssl_certificate_key   /usr/local/nginx/conf/cert/214sdfdfds0846.key;
     ssl_session_timeout 5m;
     sl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     location / {
         root $root_path;
         index index.html index.htm index.php;
         if (!-e $request_filename) {
            # rewrite ^(.*)$ /index.php?s=/$1 last;
                 rewrite ^/index.php(.*)$ /index.php?s=$1 last;
          rewrite ^(.*)$ /index.php?s=$1 last;

         }
     }
     error_page 500 502 503 504 /50x.html;
     location = /50x.html {
         root $root_path;
     }

     location ~ \.php$ {
         root $root_path;
         #fastcgi_pass 127.0.0.1:9000;
                 fastcgi_pass unix:/tmp/php-cgi.sock;
         fastcgi_index index.php;
         include fastcgi.conf;
     }

 }

4.检查nginx 配置文件

5.重启nginx

nginx -s reload

三、效果