安装ssl证书

1.可安装一次个人版 免费证书

2.进入页面购买即可

3.绑定域名，选择自动配置，提交成功

4.等待审核通过后，下载证书

5.将证书放在服务器中

6.在nginx中加入如下配置，需在服务器控制台和宝塔面板中开词443端口

listen 443 ssl;

server_name XXXXX.com;//域名

ssl on;

ssl_certificate  3247122_XXX_nginx/3247122_xxx.pem;//pem路径

ssl_certificate_key  3247122_XXX_nginx/3247122_xxx.key;//key路径

ssl_session_timeout 5m;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;

ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_prefer_server_ciphers on;

server_name m.natboo.com;

    index index.php index.html index.htm default.php default.htm default.html;

    root /www/wwwroot/www.domain.com/public;

    #error_page 404/404.html;

    error_page 404 /404.html;

    error_page 502 /502.html;

 

    include enable-php-71.conf;

    include /www/server/panel/vhost/rewrite/www.domain.com.conf;

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$

    {

        expires      30d;

        access_log off;

    }

    location ~ .*\.(js|css)?$

    {

        expires      12h;

        access_log off;

    }

    access_log  /www/wwwlogs/www.domain.com.log;

}