nginx CA证书配置HTTPS

server {
    listen 443;
    server_name eee.top;
    ssl on;
    root /data/webroot/test;
    index index.html index.htm;
    ssl_certificate   cert/2.pem;
    ssl_certificate_key  cert/244.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    location /
    {
        if (!-e $request_filename){ rewrite (.*) /index.php last;}
    }
    location ~ \.php$ {
        fastcgi_pass   127.0.0.1:9000;
        include        fastcgi_params;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        fastcgi_param  PATH_INFO $fastcgi_script_name;
    }
    location ~ /\.ht
    {
        deny  all;
    }
}