nginx 配置https访问

server {
 listen 443;
 server_name ssl.17byh.com;
 ssl on;
 ssl_certificate sslkey/1_ssl.17byh.com_bundle.crt;
 ssl_certificate_key sslkey/2_ssl.17byh.com.key;
 ssl_session_timeout 5m;
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
 #ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL;
 ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_prefer_server_ciphers on;

    access_log /data/wwwlogs/access_nginx_ssl.17byh.com.log combined;
    root /mnt/www/plist_www;
    index index.html index.htm index.php;

    include rewrite/thinkphp.conf;

    location /nginx_status {
      stub_status on;
      access_log off;
      allow 127.0.0.1;
      deny all;
    }

    location ~ index\.php(/|$) {
      #fastcgi_pass remote_php_ip:9000;
      fastcgi_pass unix:/dev/shm/php-cgi.sock;
      fastcgi_index index.php;
            fastcgi_split_path_info  ^(.+index\.php)(/.*)$;
      fastcgi_param  PATH_INFO $fastcgi_path_info;
      include fastcgi.conf;
    }
    location ~ admin\.php(/|$) {
      #fastcgi_pass remote_php_ip:9000;
      fastcgi_pass unix:/dev/shm/php-cgi.sock;
      fastcgi_index admin.php;
      fastcgi_split_path_info  ^(.+admin\.php)(/.*)$;
      fastcgi_param  PATH_INFO $fastcgi_path_info;
      try_files $uri $uri/ /admin.php?s=$fastcgi_path_info;
      include fastcgi.conf;
    }
    location ~ [^/]\.php(/|$) {
        #default_type    text/plain;
        #return 502 "服务正在升级，请稍后再试……";
        deny all;
	#allow all;
    }

    location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
        expires 30d;
        access_log off;
    }

    location ~ .*\.(js|css)?$ {
        expires 7d;
        access_log off;
    }

    location ~ /\.ht {
        deny all;
    }
 }