add photo ssl

server/cn/etc/nginx/nginx.conf

@@ -221,14 +221,14 @@ http {
         index index.php index.html;
         client_max_body_size 1000M;
 
-        #ssl_certificate ssl/photo.ovo.re.crt; #2
-        #ssl_certificate_key ssl/photo.ovo.re.key; #3
-
-        #ssl_session_cache shared:SSL:1m;
-        #ssl_session_timeout 5m;
-        #ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
-        #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
-        #ssl_prefer_server_ciphers on;
+        ssl_certificate ssl/photo.ovo.re.crt; #2
+        ssl_certificate_key ssl/photo.ovo.re.key; #3
+
+        ssl_session_cache shared:SSL:1m;
+        ssl_session_timeout 5m;
+        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+        ssl_prefer_server_ciphers on;
         error_page 404 = /404.php;
 
         if (-f $request_filename/index.html){     rewrite (.*) $1/index.html break; } 

server/cn/etc/nginx/ssl/photo.ovo.re.crt

@@ -0,0 +1,60 @@
+-----BEGIN CERTIFICATE-----
+MIIFfzCCBGegAwIBAgIQDLjmjf1l1PHRyztlfCmLfzANBgkqhkiG9w0BAQsFADBy
+MQswCQYDVQQGEwJDTjElMCMGA1UEChMcVHJ1c3RBc2lhIFRlY2hub2xvZ2llcywg
+SW5jLjEdMBsGA1UECxMURG9tYWluIFZhbGlkYXRlZCBTU0wxHTAbBgNVBAMTFFRy
+dXN0QXNpYSBUTFMgUlNBIENBMB4XDTE5MDMwNjAwMDAwMFoXDTIwMDMwNTEyMDAw
+MFowFzEVMBMGA1UEAxMMcGhvdG8ub3ZvLnJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
+AQ8AMIIBCgKCAQEAsiSnb5Pn777xyPdOBf9NCbtccrPZnUMn4FckhBCK4vdS4MqG
+M1Wr9H6b0ax7QX/y+0kbJD3uIURE/YKtwQONsz0XY2yMEJGDuhlkAyEFtcTdeKbg
+kXbnvEZANQ70tWmBsLvr/vxEspN6idU+KyvBcxx9u/sM3rSHFvhx2GF5fXYe5eiM
+wohPqNWhW2q6Y6pIc1H4NP7pEdlVrEFeE2+s7RfffbB7+doMmCz1+3NzCyk4CY2K
+8nmiDLAMuHGNORFtOr6VtMiyAqbeUdlYfGuJU0FijWCiV0+M96XE44e7dRCcRz+6
+7CJkuTHhH69gssv8Mt/TLj02vQg8wJywjQZi+QIDAQABo4ICajCCAmYwHwYDVR0j
+BBgwFoAUf9OZ86BHDjEAVlYijrfMnt3KAYowHQYDVR0OBBYEFMIqXZeLYEaLAf5l
+3BG2AW5lcEYSMBcGA1UdEQQQMA6CDHBob3RvLm92by5yZTAOBgNVHQ8BAf8EBAMC
+BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEwGA1UdIARFMEMwNwYJ
+YIZIAYb9bAECMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv
+bS9DUFMwCAYGZ4EMAQIBMH0GCCsGAQUFBwEBBHEwbzAhBggrBgEFBQcwAYYVaHR0
+cDovL29jc3AuZGNvY3NwLmNuMEoGCCsGAQUFBzAChj5odHRwOi8vY2FjZXJ0cy5k
+aWdpdGFsY2VydHZhbGlkYXRpb24uY29tL1RydXN0QXNpYVRMU1JTQUNBLmNydDAJ
+BgNVHRMEAjAAMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAu9nfvB+KcbWTlCOX
+qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFpU08GCQAABAMARjBEAiAxqX4Xs2OWEXXb
+vWBl8ai7sm9fWhQbNHq3dGKEwjvQGwIgCboIMshERagzzpf61gUXEiy2i0BJXLYE
+cCC52qRq37wAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWlT
+TwcMAAAEAwBGMEQCIETtanTcK9ePFrd9Ojqq9Ab0WC5zAZIxIeG7J4kwO6ANAiBi
+yyAOZql+KhaFO2gjiAztfoG9PGg+XNdW0QYQulg7SzANBgkqhkiG9w0BAQsFAAOC
+AQEAcsEW07++G645yOCGeXZQ5ezVSYaELpedbODQus2Bk4d2wIZzn/C1hm3OeB/S
+sZv100uCXfLBskxldQYE4uhfJdDLeymVksLwaDDn90yxy2T1maasVH6q/cPdC+Mo
+UgEKanfGfJpvPpfRrq42HuJWZoYrEa5PXcisUNAoOIZOcN6LpBBZMBf6UlXk7kZx
+BmQ87jz5rAxb32M7TbTklfp2XLyegLJBtCJuWdEflurxXMz4BguTl24qmX6CMVUQ
+lrrPF37KTwiqAAK1ECfDXJCxS8Mcuku3gzlhntyios/HlwP7AhX9i4ZJyN6q+CN/
+UnGyhM1Z/vRNC3zbm2FhdUDgPA==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIErjCCA5agAwIBAgIQBYAmfwbylVM0jhwYWl7uLjANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xNzEyMDgxMjI4MjZaFw0yNzEyMDgxMjI4MjZaMHIxCzAJBgNVBAYTAkNO
+MSUwIwYDVQQKExxUcnVzdEFzaWEgVGVjaG5vbG9naWVzLCBJbmMuMR0wGwYDVQQL
+ExREb21haW4gVmFsaWRhdGVkIFNTTDEdMBsGA1UEAxMUVHJ1c3RBc2lhIFRMUyBS
+U0EgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgWa9X+ph+wAm8
+Yh1Fk1MjKbQ5QwBOOKVaZR/OfCh+F6f93u7vZHGcUU/lvVGgUQnbzJhR1UV2epJa
+e+m7cxnXIKdD0/VS9btAgwJszGFvwoqXeaCqFoP71wPmXjjUwLT70+qvX4hdyYfO
+JcjeTz5QKtg8zQwxaK9x4JT9CoOmoVdVhEBAiD3DwR5fFgOHDwwGxdJWVBvktnoA
+zjdTLXDdbSVC5jZ0u8oq9BiTDv7jAlsB5F8aZgvSZDOQeFrwaOTbKWSEInEhnchK
+ZTD1dz6aBlk1xGEI5PZWAnVAba/ofH33ktymaTDsE6xRDnW97pDkimCRak6CEbfe
+3dXw6OV5AgMBAAGjggFPMIIBSzAdBgNVHQ4EFgQUf9OZ86BHDjEAVlYijrfMnt3K
+AYowHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQD
+AgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAG
+AQH/AgEAMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Au
+ZGlnaWNlcnQuY29tMEIGA1UdHwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2lj
+ZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwTAYDVR0gBEUwQzA3Bglg
+hkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
+L0NQUzAIBgZngQwBAgEwDQYJKoZIhvcNAQELBQADggEBAK3dVOj5dlv4MzK2i233
+lDYvyJ3slFY2X2HKTYGte8nbK6i5/fsDImMYihAkp6VaNY/en8WZ5qcrQPVLuJrJ
+DSXT04NnMeZOQDUoj/NHAmdfCBB/h1bZ5OGK6Sf1h5Yx/5wR4f3TUoPgGlnU7EuP
+ISLNdMRiDrXntcImDAiRvkh5GJuH4YCVE6XEntqaNIgGkRwxKSgnU3Id3iuFbW9F
+UQ9Qqtb1GX91AJ7i4153TikGgYCdwYkBURD8gSVe8OAco6IfZOYt/TEwii1Ivi1C
+qnuUlWpsF1LdQNIdfbW3TSe0BhQa7ifbVIfvPWHYOu3rkg1ZeMo6XRU9B4n5VyJY
+RmE=
+-----END CERTIFICATE-----

server/cn/etc/nginx/ssl/photo.ovo.re.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAsiSnb5Pn777xyPdOBf9NCbtccrPZnUMn4FckhBCK4vdS4MqG
+M1Wr9H6b0ax7QX/y+0kbJD3uIURE/YKtwQONsz0XY2yMEJGDuhlkAyEFtcTdeKbg
+kXbnvEZANQ70tWmBsLvr/vxEspN6idU+KyvBcxx9u/sM3rSHFvhx2GF5fXYe5eiM
+wohPqNWhW2q6Y6pIc1H4NP7pEdlVrEFeE2+s7RfffbB7+doMmCz1+3NzCyk4CY2K
+8nmiDLAMuHGNORFtOr6VtMiyAqbeUdlYfGuJU0FijWCiV0+M96XE44e7dRCcRz+6
+7CJkuTHhH69gssv8Mt/TLj02vQg8wJywjQZi+QIDAQABAoIBABlMCDTZiY2rjVUu
+/TbvzqZLo3CsZoIlB7QdW9OfL8HUQkImsFD44P7KveDT//rIqx4Q/xgx7S9vLObd
+GER49zXVPo2BXBB8QXr7YQ7qsQ9jYdngxLITcwvy4+pE8e4TCfYpcXVXqH+9XqDV
+Fct2nrV0fcxkdarocuiJpk0GZoSwtSPN1kpgD9lElB/9weKUtrzPbj73PJQc7L52
+hetA1iF1lNGeH2+LnjVPEJoTsFAygSO0TWMOXTqeE/j1w4SuFa0V+D4if2OCcQ/m
+uLDgZzJFDMXbqUN04tXgy4Cu8FW7Jy0jalAC8VgjmEgCNzPS1nANAJxD9ItKo/rH
+D3amHgMCgYEA43mJaBB/7PNrOV341f7p5Gggh9HU7nCVId7OjdyqgXoUeX6kKZV6
+pEfQMHeck+hca9YbV13jKRADMyPrBQtrtsZzz1xIs8gxmNu2KmB3lkM93Nkwfe73
+DScwMqSNJleSUXMREwSpxnOHRpfDpOMONF2djAFzil9aaxIH4aEQvvcCgYEAyHt1
+0iAYTm0rNdd1xi5MInqDEQHluzcWNqcU61Cs5byaq0vdZ/QVv64kaSr7S3bXRND4
+ZSOs+tLa6LVV7TAew5yrWFp818I6DyNfcmTtm2CMpZLyZd9hhwqiZfWThkiuQSNc
+StyOrvCEpS/zkUiYWWgYrpirxxi52KFAsm6JQY8CgYALhD22rQ8s+e31y5Irk2pY
+DAWJmtAC+mQygMtIV2GyiHG87PJ2wICjDJe3vHaK7nqvYvmjZLd5frwKvMjLSpa7
+fDSkzPFJWNtZ99WzM4saanEZW02fMpgDbHZ+OeKDjG91/DNjGRtXVsYEhu56zJwN
+fqfZTMGCwe0b+p+3hqYIZQKBgQCYC4IMrUih2guGVvS8K4qUL4PNVzoKpTmUk1y7
+JkEqLsLCnNO6rhP8fi6hD/brgaK7TxzDX64lv9pD2JrlOrRqOBx+8olx/JyZtIMD
+t+W4DB4+yFZLyoElsHv/haKvmdmGDzJEmEciB8khml9H1N2uGNN3PtQwN+FimND/
+QfOYowKBgHgP6R+y5CY1AxG31OsGA1VaXTWxnklanBoXrKNbBjZZF1zCXlQKImJE
+5k5vBAkXZrtXo0mYVKvSm8Uc7GRpCkeVexgegSd54/LqPube2kbxNlcam1ngtZPv
+yCy1QjDUcUqdMgkSy6PxPr87ghEW0q0ylOvGOBJ1+cfwm7utrxjy
+-----END RSA PRIVATE KEY-----