nginx配置ssl

去腾讯云申请一个免费的一年的ssl证书。可以下载下来。 nginx配置 server { listen 80; listen 443 ssl; server_name XXXX.net www.XXXX.net; index index.php index.html index.htm; ssl_certificate/ssl/1_www.XXXX.net_bundle.crt; ssl_certificate_key/ssl/2_www.XXXX.net.key; ssl_session_timeout5m; ssl_ciphersECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; ssl_protocolsTLSv1 TLSv1.1 TLSv1.2; #ssl_protocolsTLSv1.2; ssl_prefer_server_cipherson; location / { default_type text/html; subs_filter_types text/css text/xml; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Referer https://www.dongyicc.com; proxy_set_header Host www.XXXX.com; proxy_pass https://www.XXXX.com; proxy_set_header Accept-Encoding ""; } } 开启443 iptables -I INPUT -p tcp --dport 443 -j ACCEPT /etc/init.d/iptables save service iptables restart

<script type="text/javascript">// <![CDATA[ 1111 // ]]></script>