linux配置SSL案例，比较详细，HTTPS

server
    {
        listen 443 ssl;
        server_name un.net;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

		root /home/wwwroot/un;
        index index.html index.htm index.php index.shtml;
		ssl_certificate cert/un.pem;
		ssl_certificate_key cert/un.key;
		ssl_session_timeout 5m;
		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
		ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
		ssl_prefer_server_ciphers on;

		ssi on;
        ssi_silent_errors on;
        ssi_types text/shtml;

        include enable-php.conf;

        location /nginx_status
        {
            stub_status on;
            access_log   off;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }
		location / {
		   if (!-e $request_filename) {
				rewrite  ^(.*)$  /index.php?s=/$1  last;
			}
		}
        access_log  /home/wwwlogs/bm.scc-credit.com.log;
    }