[Nginx] 详解Nginx配置SSL证书实现Https访问

• 如果是在linux系统下配置，这就算准备好了；
  
• 如果是在windows系统下，需要将.key秘钥文件中的密码去除，否则就会导致配置之后Nginx启动不起来，这里是一个坑，本人就卡在了这里，具体处理方法也很简单，在网上下载openssl的windows版本，然后将cmd切换到bin目录下，执行openssl rsa -in server.key -out server2.key，生成的server2.key就是配置需要的秘钥文件，但是需要将文件名改成server.key。
  

server {
  listen  8185;
  server_name localhost; 
  ssl     on; 
  ssl_certificate   server.pem; 
  ssl_certificate_key server.key; 
  ssl_session_timeout 5m;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM; 
  ssl_prefer_server_ciphers  on;
 
  location / {
    proxy_set_header Host $host:$server_port; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_connect_timeout  5;
    proxy_send_timeout   5;
    proxy_read_timeout   5; 
    proxy_pass http://qlddm_server;
  }

<Connector
  executor="tomcatThreadPool"
  port="7083"
  protocol="org.apache.coyote.http11.Http11Nio2Protocol"
  connectionTimeout="20000"
  maxConnections="8000"
  redirectPort="8185"
  proxyPort="8185"
  enableLookups="false"
  acceptCount="100"
  maxPostSize="10485760"
  compression="on"
  disableUploadTimeout="true"
  compressionMinSize="2048"
  acceptorThreadCount="2"
  compressableMimeType="text/html,text/xml,text/plain,text/css,text/javascript,application/javascript"
  URIEncoding="utf-8"
  />

<Valve className="org.apache.catalina.valves.RemoteIpValve"
     remoteIpHeader="X-Forwarded-For"
     protocolHeader="X-Forwarded-Proto"
     protocolHeaderHttpsValue="https" httpsServerPort="8185"/>