Nginx配置正向代理和反向代理，实现HTTPS通信的案例

openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout /home/data/ssl/nginx.key -out /home/data/ssl/nginx.crt

server {
        listen 443 ssl;
        server_name proxy.test.com;
        root  /home/data/proxy;

        ssl_certificate /home/data/ssl/nginx.crt;
        ssl_certificate_key /home/data/ssl/nginx.key;
        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;
        #禁止在header中出现服务器版本，防止黑客利用版本漏洞攻击
        server_tokens off;
        #如果是全站 HTTPS 并且不考虑 HTTP 的话，可以加入 HSTS 告诉你的浏览器本网站全站加密，并且强制用 HTTPS 访问
        fastcgi_param   HTTPS               on;
        fastcgi_param   HTTP_SCHEME         https;

        location /api/
        {
            rewrite ^/api/(.*) /$1 break;
            proxy_pass http://192.168.10.191:8080;
        }      
}

server {
    listen       80;
       server_name  www.forwordproxy.com;

       resolver 8.8.8.8;
       location / {

         proxy_pass https://$http_host$request_uri;
      }

       error_page   500 502 503 504  /index.html;
       location = /index.html {
         root   /home/data/forwordproxy;
       }
}

wget --ca-certificate=/home/data/ssl/nginx.crt -e "http_proxy=http://www.forwordproxy.com" "https://proxy.test.com/interface/test"

wget --no-check-certificate  -e "http_proxy=http://www.forwordproxy.com" "https://proxy.test.com/interface/test"