生成免費(fèi)ssl證書：

openssl req -x509 -newkey rsa:2048 -nodes -sha256 -keyout localhost-privkey.pem -out localhost-cert.pem

生成的ssl證書

nginx配置

proxy_cache_path cache levels=1:2 keys_zone=my_cache:10m;


server {#由http跳轉(zhuǎn)到https
  listen       80 default_server;
  listen       [::]:80 default_server;
  server_name  test.com;
  return 302 https://$server_name$request_uri;
}

server {
  listen       443;
  server_name  test.com;

  ssl on;
  ssl_certificate_key /usr/local/etc/nginx/certs/localhost-privkey.pem;
  ssl_certificate /usr/local/etc/nginx/certs/localhost-cert.pem;

  location / {
    proxy_cache my_cache;
    proxy_pass http://127.0.0.1:8888;
    proxy_set_header Host $host; #nginx對(duì)http請(qǐng)求的host進(jìn)行轉(zhuǎn)發(fā)
  }
}

此時(shí)，無論訪問http://test.com/還是https://test.com/都會(huì)跳轉(zhuǎn)到https