nginx服务器中配置SSL证书

server {
  listen 443;
  server_name www.yxk.cn yxk.cn;
  access_log /data/wwwlogs/www.yxk.cn_nginx.log combined;
  index index.html index.htm index.php;
  root /data/wwwroot/www.yxk.cn/public;
  if ($host != www.yxk.cn) {  return 301 $scheme://www.yxk.cn$request_uri;  }
  
  location / {
    if (!-e $request_filename) {
      rewrite ^(.*)$ /index.php?s=$1 last;
      break;
    }
  }
  #error_page 404 /404.html;
  #error_page 502 /502.html;
  ssl on;
  ssl_certificate /usr/local/nginx/conf/ssl/215081841610354.pem;
  ssl_certificate_key /usr/local/nginx/conf/ssl/215081841610354.key;  


  location ~ [^/]\.php(/|$){
    fastcgi_pass unix:/dev/shm/php-cgi.sock;
    fastcgi_index index.php;
    fastcgi_split_path_info ^(.+\.php)(.*)$;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
	include fastcgi_params;
    #include fastcgi.conf;
    #include pathinfo.conf;
  }

  location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
    expires 30d;
    access_log off;
  }
  location ~ .*\.(js|css)?$ {
    expires 7d;
    access_log off;
  }
  location ~ /\.ht {
    deny all;
  }
}

server{
   listen 80;
   server_name www.yxk.cn yxk.cn;
   rewrite ^(.*)$ https://$host$1 permanent;

}

后面的server块中，将http协议的请求自动转到https