Nginx证书访问控制

HTTP自动跳转至HTTPS

server {
listen 80;
server_name www.pop.com;
return 301 https://www.pop.com$request_uri;
}

server {
listen 443 ssl;

ssl on;
ssl_certificate /etc/nginx/server_cert/ca.crt;
ssl_certificate_key /etc/nginx/server_cert/ca.key;

ssl_client_certificate /etc/nginx/client_cert/user.crt;
ssl_verify_client on;

...

}