1、准备好perl/openssl
ActivePerl-5.12.2.1202-MSWin32-x86-293621.msi
openssl-0.9.8k.tar.gz
编译
参考这个:http://blog.pfan.cn/xman/47886.html
2、自签发证书
openssl genrsa -out xxx.key
openssl req -new -key 900ku.key -out xxx.csr
openssl x509 -req -days 3650 -in 900ku.csr -signkey 900ku.key -out xxx.crt
*注意C:usrlocalsslopenssl.cnf
3、修改nginx配置
server {
listen 80;
listen 443;
server_name xxx.xxx.com;
ssl on;
ssl_certificate /nginx/key/xxx.crt;
ssl_certificate_key /nginx/key/xxx.key;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56: