nginx配置ssl_niginx sslciphersuite all:!anull:!adh:!enull:!low:

server {
        listen       80;
        listen       443;
        server_name  xx.xxx.com ;
        root   "E://wwwroot//xx.xxx.com";

        ssl                  on;
        ssl_certificate      E:/phpstudy/PHPTutorial/nginx/conf/ssl/xx.xxx.com/xx.xxx.com.pem;
        ssl_certificate_key  E:/phpstudy/PHPTutorial/nginx/conf/ssl/xx.xxx.com/xx.xxx.com.key;

        ssl_session_timeout  5m;

        #ssl_protocols  SSLv2 SSLv3 TLSv1;
        ssl_protocols  TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

        if ($server_port = 80) {  # http强制跳转https
            return 301 https://$server_name$request_uri;
        }

        location / {       
            index  index.html index.htm index.php;
            #autoindex  on;            
        }
        location ~ \.php(.*)$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_split_path_info  ^((?U).+\.php)(/?.+)$;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            fastcgi_param  PATH_INFO  $fastcgi_path_info;
            fastcgi_param  PATH_TRANSLATED  $document_root$fastcgi_path_info;
            include        fastcgi_params;
        }
}