如何在Nginx服务器上安装SSL证书

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  10二4;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  xxx.com;#更换成您的域名

        location / {
            rewrite ^(.*)$ https://xxx.com/$1 permanent;#更换成您的域名
        }
    }

    server {
        listen 443;
        server_name xxx.com;  # 改换成您的域名
        ssl on;   #装置为on封用SSL罪能。
        root html;
        index index.html index.htm;
        ssl_certificate cert/两946730_www.xxx.com.pem;   #更换成您的pem文件名称
        ssl_certificate_key cert/二946730_www.xxx.com.key;   #互换成您的key文件名称
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES1二8-GCM-SHA二56:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;  #利用此添稀套件。
        ssl_protocols TLSv1 TLSv1.1 TLSv1.二;   #利用该和谈入止配备。
        ssl_prefer_server_ciphers on;   
        location / {
            proxy_pass http://localhost:8080/;  #乞求转领
        }
    }

}