1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

<Connector port="80" protocol="HTTP/1.1"

               connectionTimeout="20000"

               redirectPort="443"

               URIEncoding="UTF-8"

               useBodyEncodingForURI="true"/>

   <Connector port="443"

    URIEncoding="UTF-8"

    useBodyEncodingForURI="true"

    protocol="HTTP/1.1"

    SSLEnabled="true"

    scheme="https"

    secure="true"

    keystoreFile="cert/7354355_adv.ss.com.pfx"    //刚才上传的/证书

    keystoreType="PKCS12"

    keystorePass="M83445"                 //刚才pfx-password.txt 里面内容

    clientAuth="false"

    ciphers="TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"

    SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"

    SSLCipherSuite="ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4"/>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

#####adv入口#######

      upstream tomcat-8616{

              server localhost:8616;

      }

      server {

      listen       80;

      server_name  adv.ss.com;

          location / {

          proxy_pass   http://tomcat-8616;

          //访问静态资源的配置

          proxy_set_header Host $http_host;

          proxy_set_header X-Real-IP $remote_addr;

          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

          proxy_set_header X-Forwarded-Proto $scheme;

      }

      location ~ .*\.(js|css)$ {

           proxy_pass http://tomcat-8616;

      }

       location ~ .*\.(gif|jpg|jpeg|jpg|bmp|swf)$ {

           proxy_pass http://tomcat-8616;

      }

  }