Nginx配置SSL实现HTTPS访问

nginx配置文件如下:

 server {
        listen       443 ssl;
        server_name  www.domain.com;
        root /www/web;
        index index.html index.php;
 
        ssl_certificate      cert/2268832_www.domain.com.pem;
        ssl_certificate_key  cert/2268832_www.domain.com.key;
 
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
 
        ssl_ciphers  ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_prefer_server_ciphers  on;
 
        location ~* \.(ico|css|js|gif|jpe?g|png)(\?[0-9]+)?$ {
                expires max;
                log_not_found off;
        }
 
       if ( $host != 'www.domain.com' ) {
          rewrite "^/(.*)$" https://www.domain.com/$1 permanent;
        }
 
        location / {
                # Check if a file or directory index file exists, else route it to index.php.
                try_files $uri $uri/ /index.php;
        }
 
        location ~* \.php$ {
                fastcgi_pass 127.0.0.1:9000;
                include fastcgi.conf;
        }
 
        #location / {
        #    root   html;
        #    index  index.html index.htm;
        #}
    }
 
       server {
        listen 80;
        server_name www.domain.com;
        rewrite ^(.*)$ https://$host$1 permanent;
 
       }

检测配置是否正确命令:

/usr/local/nginx/nginx -t

配置正确重启nginx:

/usr/local/nginx/nginx -s reload

最后就可以访问网站看到https了。