nginx配置
{ listen 443;
server_name test.microdci.cn;
ssl on;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_certificate /Users/reign/Documents/java_workspace/stock/dci-appinterface/cers/server.crt;
ssl_certificate_key /Users/reign/Documents/java_workspace/stock/dci-appinterface/cers/server.key;
ssl_client_certificate /Users/reign/Documents/java_workspace/stock/dci-appinterface/cers/ca.crt;
ssl_verify_client on;


ssl_session_timeout 5m;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+PKCS12:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
root /Users/reign/Documents/html/testhttps/;
location / {
index index.html;
proxy_pass https://api.microdci.cn:8899;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
#proxy_set_header Via "nginx";
}
jetty同时配置了ssl，但是java去调用的时候却遇到502 Bad GateWay
如果不去代理，可以直接访问nginx的静态文件信息，代理后报错日志
server: test.microdci.cn, request: "GET /testssl HTTP/1.1", upstream: "https://[::1]:8899/testssl", host: "http://test.microdci.cn"
2015/05/27 09:55:48 [error] 1791#0: *177 SSL_do_handshake() failed (SSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol) while SSL handshaking to upstream, client: 127.0.0.1, server: test.microdci.cn, request: "GET /testssl HTTP/1.1"