进入阿里云账户---安全(云盾)---证书服务---购买证书---选择免费DV SSL--购买
将生成的rem 和key ,放到nginx里面的conf ,新建cert文件夹里。
在nginx里面配置好,就Ok了。
server {
listen 443;
server_name www.xxxx.com;
ssl on;
ssl_certificate cert/222.pem;
ssl_certificate_key cert/222.key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDH44E:EC33DH:AES33:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols T33LSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-Ip $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_pass http://127.0.0.1:8004/;
}
}