1.安裝nginx

yum install openssl-devel nginx

依賴關係（y安裝、d只下載、N不安裝），選y即可
Is this ok [y/d/N]: y

如果出現Complete!安裝完成

2.配置檔案在/etc/nginx

3.從騰訊雲官網申請證書並下載，如下圖

4.建立一個資料夾ssl

cd /etc/nginx/
mkdir ssl

5.解壓證書檔案將Nginx中的檔案上傳到ssl目錄下

6.在/etc/nginx/conf.d/這個目錄下建立一個(自定義名稱).conf檔案，

cd /etc/nginx/conf.d/
vim weixuehu.conf

檔案內容如下：

server{
      listen 80;    #表示監聽80埠
      server_name weixuehu.com www.weixuehu.com;
      location / {    #將80埠強制轉為https
          rewrite (.*) https://www.weixuehu.com$1 permanent;
      }
}
server
{
        listen 443 ssl;    #表示監聽443埠即https
        server_name weixuehu.com www.weixuehu.com;
        ssl on;
        ssl_certificate /etc/nginx/ssl/1_www.weixuehu.com_bundle.crt;   #證書公鑰檔案路徑
        ssl_certificate_key /etc/nginx/ssl/2_www.weixuehu.com.key;      #證書私鑰檔案路徑
        ssl_session_timeout 5m;                                         #5分鐘session會話保持
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;
        location / {    #跳轉到實際應用
            proxy_pass http://127.0.0.1:9999;
            proxy_redirect   off;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
    }
}
 

7.在配置weixuehu.conf檔案時要注意自己的配置檔案路徑問題

配置檔案引數    說明
listen 443        SSL訪問埠號為443
ssl on            啟用SSL功能
ssl_certificate    證書檔案
ssl_certificate_key    私鑰檔案
ssl_protocols    使用的協議
ssl_ciphers        配置加密套件，寫法遵循openssl標準

8.啟動nginx,如果沒有錯誤資訊則表示啟動成功

service nginx start
或
service nginx restart

我在啟動的時候報了以下錯誤（發現是我的加密檔案放錯位置了，別的問題也會報這個提示）：
 

Redirecting to /bin/systemctl restart  nginx.service
Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.

根據提示執行命令：

systemctl status nginx.service

報錯資訊
● nginx.service - The nginx HTTP and reverse proxy server
   Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
   Active: failed (Result: exit-code) since Mon 2018-11-05 14:53:32 CST; 21s ago
  Process: 5999 ExecStart=/usr/sbin/nginx (code=exited, status=1/FAILURE)
  Process: 9023 ExecStartPre=/usr/sbin/nginx -t (code=exited, status=1/FAILURE)
  Process: 9022 ExecStartPre=/usr/bin/rm -f /run/nginx.pid (code=exited, status=0/SUCCESS)

Nov 05 14:53:32 VM_0_15_centos systemd[1]: Starting The nginx HTTP and reverse proxy server...
Nov 05 14:53:32 VM_0_15_centos nginx[9023]: nginx: [emerg] BIO_new_file("/etc/nginx/1_www.weixuehu.com_bundle.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory:fop...:no such file)
Nov 05 14:53:32 VM_0_15_centos nginx[9023]: nginx: configuration file /etc/nginx/nginx.conf test failed
Nov 05 14:53:32 VM_0_15_centos systemd[1]: nginx.service: control process exited, code=exited status=1
Nov 05 14:53:32 VM_0_15_centos systemd[1]: Failed to start The nginx HTTP and reverse proxy server.
Nov 05 14:53:32 VM_0_15_centos systemd[1]: Unit nginx.service entered failed state.
Nov 05 14:53:32 VM_0_15_centos systemd[1]: nginx.service failed.
Hint: Some lines were ellipsized, use -l to show in full.

9.最後使用https訪問一下是否成功