如果从https访问minio而又使用nginx代理的话，那么注意两边的证书要一致。

java那边把证书放在$JAVA_HOME/jre/lib/security下面，用以下命令引入：

keytool -import -alias public -keystore cacerts -file public.crt

changeit

keytool -list -keystore cacerts -alias public

nginx配置如下 

#user  nobody;
worker_processes  1;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    sendfile        on;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       8081 default_server ssl;
        server_name  localhost;
		
		#ssl                  on;
        ssl_certificate     /root/enc/server.crt;#配置证书位置
        ssl_certificate_key  /root/enc/server.key;#配置秘钥位置
		
        ssl_session_timeout  5m;
        ssl_protocols  SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;

		
		location / {
			proxy_set_header Host $http_host;
            #minio内网端口
			proxy_pass https://127.0.0.1:9000/;
		}

		#外网端口
        error_page 497 400  https://$host:8999$request_uri;
		
    }

}