アリクラウド構成サーバssl証明書(小白silen)

chmod -R 777 sh-1.5.5
cd sh-1.5.5
./install.sh  

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
  worker_connections  1024;
}


http {
    include       mime.types;
   default_type  application/octet-stream;

 #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" 
 #                  $status $body_bytes_sent "$http_referer" 
 #                  "$http_user_agent" "$http_x_forwarded_for";

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  localhost;

  #charset koi8-r;

  #access_log  logs/host.access.log  main;
  
  location / {
      root   html;
      index  index.html index.htm;
  }

  #error_page  404              /404.html;

  # redirect server error pages to the static page /50x.html
  #

  error_page   500 502 503 504  /50x.html;
  location = /50x.html {
      root   html;
  }

  # proxy the PHP scripts to Apache listening on 127.0.0.1:80
  #
  #location ~ \.php$ {
  #    proxy_pass   http://127.0.0.1;
  #}

  # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
  #
  #location ~ \.php$ {
  #    root           html;
  #    fastcgi_pass   127.0.0.1:9000;
  #    fastcgi_index  index.php;
  #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
  #    include        fastcgi_params;
  #}

  # deny access to .htaccess files, if Apache's document root
  # concurs with nginx's one
  #
  #location ~ /\.ht {
  #    deny  all;
  #}


    # another virtual host using mix of IP-, name-, and port-based configuration
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
  #    }
    #}


    # HTTPS server
    #
    server {
  listen       443 ssl;
  server_name  localhost;
  
  #ssl                  on;
  ssl_certificate      cert/214211268900404.pem;
  ssl_certificate_key  cert/214211268900404.key;

  ssl_session_timeout  5m;

  ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
  ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
  ssl_prefer_server_ciphers   on;

  location / {
      root   /alidata/www/phpwind;
      index  index.html index.htm index.php;
  }
  
  # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
  #
  location ~ \.php$ {
      root           /alidata/www/phpwind;
      fastcgi_pass   127.0.0.1:9000;
      fastcgi_index  index.php;
      
      fastcgi_param  SCRIPT_FILENAME  /alidata/www/phpwind$fastcgi_script_name;
      
      include        fastcgi_params;
  }
}