php - nginx配置HTTPS出錯
問題描述
瀏覽器報錯信息
Nginx配置
問題解答
回答1:你不會是用IP地址直接訪問的吧? 證書證明的是域名,一定要用證書綁定的域名訪問。
回答2:nginx啟動不報錯?
回答3:nginx -t看了沒,還有日志沒記錄么
回答4:證書是對域名簽發的,你用ip訪問當然會出現這樣的情況呀,因為找不到IP 對應的證書啊!
回答5:數字證書的路徑要使用絕對路徑,例如:
ssl_certificate /usr/local/nginx/ssl/enginx.net.crt; ssl_certificate_key /usr/local/nginx/ssl/enginx.net.key;
還有server_name不能用127.0.0.1,請使用域名,例如:
server_name enginx.net;
以下是我的SSL配置文件:
ssl on; ssl_certificate /usr/local/nginx/ssl/enginx.net.crt; ssl_certificate_key /usr/local/nginx/ssl/enginx.net.key; ssl_buffer_size 16k; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:DES-CBC3-SHA; ssl_prefer_server_ciphers on; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_session_cache builtin:20480 shared:SSL:10m; ssl_session_timeout 1h; ssl_stapling on; ssl_session_tickets on;
相關文章:
