ssl证书

先生申请证书  再放到如下位置

location / {
    server {
        listen       80;
        server_name  api.partai.cn;

        server_name_in_redirect off;
        proxy_set_header Host $host:$server_port;

        location / {
            proxy_http_version                      1.1;
              proxy_set_header                        X-Real-IP $remote_addr;
             proxy_set_header                        X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header                        X-NginX-Proxy true;
             proxy_redirect                                 off;
             proxy_pass                             http://127.0.0.1:8888;
        }
    }

    server {
        listen       443 ssl;
        server_name  api.partai.cn;

        ssl_certificate /etc/ssl/1_api.partai.cn_bundle.crt;
        ssl_certificate_key /etc/ssl/2_api.partai.cn.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;

        server_name_in_redirect off;
        proxy_set_header Host $host:$server_port;

        location / {
                    proxy_http_version                      1.1;
                   proxy_set_header                        X-Real-IP $remote_addr;
                    proxy_set_header                        X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_set_header                        X-NginX-Proxy true;
                    proxy_redirect                                 off;
                    proxy_pass                             http://127.0.0.1:8888;
        }
    }