nginx安装SSL证书的正确方法

server {

    listen 80;

    #监听443端口(必须)

    listen 443 ssl;

    server_name domain.com www.domain.com;

    index index.html index.php index.htm;

    root /www/wwwroot/domain.com;

    #引用证书(必须，放在conf/ssl目录下可以用相对路径，其他位置用绝对路径)

    ssl_certificate     ssl/domain.com.crt;

    ssl_certificate_key ssl/domain.com.key;

    #协议优化(可选，优化https协议，增加安全性)

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;

    ssl_prefer_server_ciphers on;

    ssl_session_cache shared:SSL:10m;

    ssl_session_timeout 10m;

    #其他的配置信息???

}

nginx -V

./configure --with-http_stub_status_module --with-http_ssl_module

make && make install