server { listen 443; server_name demo.shengruijt25.com; ssl on; root html; index index.html index.htm; ssl_certificate /data/website/demo_373/cert/demo.pem; ssl_certificate_key /data/website/demo_373/cert/demo.key; ssl_session_timeout 5m; ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; location / { root /data/website/demo_373; index index.html index.htm index.php; if (!-e $request_filename) { rewrite ^/index.php(.*)$ /index.php?s=$1 last; rewrite ^(.*)$ /index.php?s=$1 last; break; } } access_log /data/website/log/demo_373.log main; location ~ .php$ { root /data/website/demo_373; include fastcgi.conf; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; } }
注意: crt或者cer证书可以直接改后缀名为pem证书