[root@web01 backup]#  openssl req -new -x509 -nodes -out server.crt -keyout server.key

 Generating a  bit RSA private key

 ......................................................+++

 ...................................+++

 writing new private key to 'server.key'

 -----

 You are about to be asked to enter information that will be incorporated

 into your certificate request.

 What you are about to enter is what is called a Distinguished Name or a DN.

 There are quite a few fields but you can leave some blank

 For some fields there will be a default value,

 If you enter '.', the field will be left blank.

 -----

 Country Name ( letter code) [XX]:CH        #国家名称

 State or Province Name (full name) []:bj       #省

 Locality Name (eg, city) [Default City]:bj     #市

 Organization Name (eg, company) [Default Company Ltd]:ZNIX   #组织名称

 Organizational Unit Name (eg, section) []:ZNIX   #组织名称

 Common Name (eg, your name or your server's hostname) []:ZNIX  #服务器名称

 Email Address []:ADMIN@ZNIX.TOP    #邮箱

 [root@web01 backup]# ls

 server.crt  server.key

 生成的密钥文件

 [root@web01 backup]# ll

 total

 -rw-r--r--  root root  Nov   : server.crt

 -rw-r--r--  root root  Nov   : server.key

 [root@web01 ~]# cat  /application/nginx/conf/extra/www.conf

 server {

     listen        ssl;

     server_name  www.nmtui.com;

     ssl_certificate      /application/nginx/key/server.crt;

     ssl_certificate_key  /application/nginx/key/server.key;

     ssl_session_cache    shared:SSL:1m;

     ssl_session_timeout  5m;

     ssl_ciphers  HIGH:!aNULL:!MD5;

     ssl_prefer_server_ciphers  on;    

     location / {

         root   html/www;

         index  index.php ;

     }

     location ~* .*\.(php|php5)?$ {

                 root html/www;

                 fastcgi_pass  127.0.0.1:;

                 fastcgi_index index.php;

                 include fastcgi.conf;

     }

     access_log  logs/access_www.log  main;

 }