ubuntu系统nginx服务器ca证书的安装
找到nginx配置，nginx.conf里面，引入的default配置
server{
listen 443 ssl default_server;
listen [::]:443 ssl default_server;

server_name ceshi.ceshi.ceshi;#需要绑定的域名
location / {
proxy_pass http://ceshi;#nginx.conf里面配置的upstream 代理服务器
}

ssl on;
ssl_certificate /cert/ceshi.pem;#证书路径
ssl_certificate_key /cert/ceshi.key;#证书路径

ssl_session_timeout 5m;

ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
ssl_prefer_server_ciphers on;
}