xxxxxxxxxx
server {
listen 443 ssl;
server_name www.example.com;
ssl_certificate www.example.com.chained.crt;
ssl_certificate_key www.example.com.key;
}
xxxxxxxxxx
$ openssl req -x509 -sha256 -nodes -newkey rsa:2048 -days 365 -keyout localhost.key -out localhost.crt
xxxxxxxxxx
ssl_certificate www.example.com.cert;
ssl_certificate_key www.example.com.cert;