http强制转https

记录一次http转https的事故

查文档说是老版本加一句rewrite ^(.*)$ https://$host$1 permanent;就可以，然而

在listen 443;情况下 加了这句，没有效果，看了各种资料，发觉，其实应该是还是要解析http一次，但是在解析http时候加一句rewrite ^(.*)$ https://$host$1 permanent;

就可以了，于是有了下文

server

    {

        listen 80;

        server_name locahost;

        rewrite ^(.*)$ https://$host$1 permanent;

    }

server

    {

        listen 443;

        #listen [::]:80 default_server ipv6only=on;

     

        ssl on;

        server_name locahost;

        ssl_certificate   /usr/local/nginx/conf/vhost/1861473/test.pem;

        ssl_certificate_key  /usr/local/nginx/conf/vhost/1861473/test.key;

        ssl_session_timeout 5m;

        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

        ssl_prefer_server_ciphers on;

        index index.html index.htm index.php;

        root  /home/wwwroot/ruiqu;

 

        #error_page   404   /404.html;

        include enable-php.conf;

        if (!-e $request_filename) {

            rewrite ^(.*)$ /index.php?s=$1 last;

            break;

        }

 

        location /nginx_status

        {

            stub_status on;     

            access_log   off;

        }

 

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

        {

            expires      30d;

        }

 

        location ~ .*\.(js|css)?$

        {

            expires      12h;

        }

 

        location ~ /\.

        {

            deny all;

        }

 

        access_log  /home/wwwlogs/access.log;

    }