nginx多域名、多证书

环境：

一台nginx服务器 192.168.10.251

两台windowsserver2012 IIS服务器 （192.168.10.252、192.168.10.253）

从阿里云上下载ssl证书并上传到nginx服务器

nginx配置文件 添加证书

upstream test_1.com {
       # ip_hash;
               server 192.168.10.252:80 weight= max_fails= fail_timeout=12s;
               server 122.226.10.253: weight= max_fails= fail_timeout=12s;
                       }
server {
   listen ;
    #access_log  logs/access.log  ;
       server_name  test_1.com;         
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_1.pem;
       ssl_certificate_key /usr/local/nginx/cert/test_1.key;
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1. TLSv1.;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;
   location / {
       root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_1.com;
          client_max_body_size 50m;
                 }
     }
upstream test_2.com {
       # ip_hash;
               server 122.226.10.252: weight= max_fails= fail_timeout=12s;
               server 122.226.10.253: weight= max_fails= fail_timeout=12s;
                       }
server {
   listen ;
        #access_log  logs/access.log  ;
       server_name  test_2.com;
       ssl on;
       ssl_certificate /usr/local/nginx/cert/test_2.pem;
       ssl_certificate_key /usr/local/nginx/cert/test_2.key;
       ssl_session_cache shared:SSL:1m;
       ssl_session_timeout 5m;
       ssl_protocols TLSv1 TLSv1. TLSv1.;
       ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
       ssl_prefer_server_ciphers on;
   location / {
           root   html;
          index  index.html index.htm;
          proxy_redirect off;
          proxy_set_header Host $host;
          proxy_set_header X-Real-IP $remote_addr;
          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
          proxy_pass http://test_2.com;
          client_max_body_size 50m;
                 }
     }
}

参考：

https://blog.csdn.net/fragrant_no1/article/details/83785882
https://www.cnblogs.com/beyang/p/7718463.html
https://blog.csdn.net/weixin_38187317/article/details/81670073
https://www.cnblogs.com/beyang/p/7718463.html