nginx配置ssl证书（http转https）的时候需要注意的一些关键点

  upstream api{
	server localhost:8899;
    }
#以上是tomcat8899端口让nginx代理

    server {
        listen       80;
        server_name zhibo.idingbei.cn;
	rewrite ^(.*) https://zhibo.idingbei.cn$1 permanent;//讲http请求转向https
	
    }

   server {
        listen       443 ssl;
        server_name  zhibo.idingbei.cn;
	
        ssl_certificate      /opt/ssl/zhibo.idingbei.cn.pem;//这是证书文件要传到服务器上
        ssl_certificate_key  /opt/ssl/zhibo.idingbei.cn.key;;//这是证书文件要传到服务器上
 

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;
	 #access_log  logs/host.access.log  main;
	
        location  / {
	 
            proxy_pass  http://api; 
	    proxy_connect_timeout 4s; 
	    proxy_read_timeout 7200s; 
	    proxy_send_timeout 12s; 
	    proxy_set_header Upgrade $http_upgrade;
	    proxy_set_header Connection "upgrade";	
      
        }
	
	error_page   500 502 503 504  /50x.html;
	location = /50x.html {
          root   html;
	}
    }