Chrome信任我的自签名SSL证书

windows下载：​​https://github.com/FiloSottile/mkcert/releases/download/v1.4.4/mkcert-v1.4.4-windows-amd64.exe  （linux版本：https://github.com/FiloSottile/mkcert/releases）​​

cmd窗口执行下面命令

1、生成证书

mkcert-v1.4.4-windows-amd64.exe ​​www.a.com​​ localhost 127.0.0.1 192.168.100.220

2、安装证书（该命令会在系统中安装ca根证书，图片所示）

mkcert-v1.4.4-windows-amd64.exe -install 

3、两个pem文件上传nginx 目录

server {
        listen 443 ssl;
        server_name www.a.com;
        ssl_certificate /etc/nginx/ssl/a.pem;
        ssl_certificate_key /etc/nginx/ssl/akey.pem;
        ssl_session_timeout 5m;

        #请按照以下协议配置
        ssl_protocols TLSv1.2 TLSv1.3;
        #请按照以下套件配置，配置加密套件，写法遵循 openssl 标准。
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
        ssl_prefer_server_ciphers on;

        location / {
            root /etc/nginx/ssl/;
            index  index.php index.html index.htm;
        }

        # php网站需要加入以下配置
        location ~ \.php$ {
            root           /home/baidu;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            include        fastcgi_params;
        }
    }