Nginx的SSL证书共有两个文件:pem和key(位于证书文件的Nginx目录)
1. 找nginx配置文件的文件夹，可输入whereis nginx命令查看
2. 上传证书两个文件至/usr/local/nginx/conf/ssl 目录
3. 编辑配置文件/usr/local/nginx/conf/vhost/domain_com.conf 加入下列代码

listen 443 ssl;    
ssl on;
ssl_certificate /usr/local/nginx/conf/ssl/domain-com.pem;
ssl_certificate_key /usr/local/nginx/conf/ssl/domain-com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:DHE-R SA-AES256-SHA:DHE-RSA-AES128-SHA:RC4-SHA:!aNULL:!eNULL:!EXPORT:!DES:!3DES: !MD5:!DSS:!PKS;
ssl_session_cache builtin:1000 shared:SSL:10m;

加入后的配置文件如下

server
{
listen 80;
listen 443 ssl;
ssl on;
ssl_certificate /usr/local/nginx/conf/ssl/domain-com.pem;
ssl_certificate_key /usr/local/nginx/conf/ssl/domain-com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-S HA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES256-SHA:DHE-R SA-AES256-SHA:DHE-RSA-AES128-SHA:RC4-SHA:!aNULL:!eNULL:!EXPORT:!DES:!3DES: !MD5:!DSS:!PKS;
ssl_session_cache builtin:1000 shared:SSL:10m;
server_name  domain.com
index index.html index.htm index.php default.html default.htm default.php;
root /home/wwwroot/vhost/domain-com/;
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires     30d;
}
location ~ .*\.(js|css)?$
{
expires     12h;
}
location ~ /\.
{
deny all;
}
location ~ .*\.(tpl|inc|cfg)
{
deny all;
}
access_log off;
}

注意：

• pem和key的名字和路径要对应
• domain-com要替换为你自己的域名
• /home/wwwroot/vhost/domain-com/填写你的实际网站路径
• 443端口要打开
• 最后记得重启Nginx service nginx restart
• 此方法以我爱主机购买的证书为例，其他证书设置可能会有差异

最后，如果你想要将http自动跳转到https，请下载这个文件，解压后放到你的站点根目录就可以了