listen 443;
server_name _ ;
root "/data/fun_bqt/public/";
ssl on;
ssl_certificate /usr/local/nginx/bjbdr/1_xxx.crt; #ssl证书存放路径
ssl_certificate_key /usr/local/nginx/bjbdr/2_xxx.key ; #ssl证书存放路径
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #按照这个协议配置
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;#按照这个套件配置
ssl_prefer_server_ciphers on; 原文：http://blog.51cto.com/yht1990/2140619