nginx配置安全证书

server {
        #安全证书端口443
	listen   443;
        server_name www.ceshi.com;
        index index.html index.htm index.php;
        root /alidata/www/demo;
        #安全证书配置
	 ssl on;
        #证书和秘钥路径
         ssl_certificate /alidata/www/xxxxxxxxx.crt;
         ssl_certificate_key   /alidata/www/xxxxxxxxx.key;
         ssl_session_timeout 5m;
         ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
         ssl_prefer_server_ciphers on;
        location ~* ^/(statics|uploadfile)/.*.(php|php5)$ {
                deny all;
        }

	error_page  404 403 500 502 503 504  /404.html;
        location ~ .*\.(php|php5)?$
        {
                #fastcgi_pass  unix:/tmp/php-cgi.sock;
                fastcgi_pass  127.0.0.1:9000;
                fastcgi_index index.php;
                include fastcgi.conf;
        }
        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
                expires 30d;
        }
        location ~ .*\.(js|css)?$
        {
                expires 1h;
        }
        access_log  /alidata/log/nginx/access/www.ceshi.com.log;
}
server{
        #设置http跳转https
        listen      80;
        server_name www.ceshi.com;
        return 301 https://www.ceshi.com;
}