Think before you speak, read before you think.

内部代理外部 ssl 站点减小延迟

server {
    listen      80;
    server_name jpuyy.com;
    #...

    location / {
        proxy_pass                    https://jpuyy.com;
        #proxy_ssl_certificate         /etc/nginx/client.pem;
        #proxy_ssl_certificate_key     /etc/nginx/client.key;
        #proxy_ssl_protocols           TLSv1 TLSv1.1 TLSv1.2;
        #proxy_ssl_ciphers             HIGH:!aNULL:!MD5;
        proxy_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;

        proxy_ssl_verify        on;
        proxy_ssl_verify_depth  2;
        proxy_ssl_session_reuse on;
    }
}

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *