listen 443 ssl; # listen 443; (这里使用443 ssl这种方式,ssl on的方式可能会https访问400 bad request)
# ssl on;
ssl_certificate pem;
ssl_certificate_key key;
ssl_session_timeout 5m;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;