☰

添加 ssl 后 Nginx 不会重新启动

tag-icon • tag-icon nginx ssl ssl-certificate vps
添加 ssl 后 Nginx 不会重新启动

我对我的一些修改root@mypage:/etc/nginx/sites-available/default

当我这样做时sudo service nginx restart 服务器返回此错误：Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.

如果我运行nginx -t -c /etc/nginx/nginx.conf输出是

Enter PEM pass phrase: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful

有人能告诉我我做错了什么吗？我完全不知道该说什么

这是root@mypage:/etc/nginx/sites-available/default文件

 server {
    listen 80;
    listen [::]:80 default_server ipv6only=on;

    server_name mypage.com;
    passenger_enabled on;
    rails_env    production;
    root         /home/deploy/mypage/current/public;

    # redirect server error pages to the static page /50x.html
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }
 }

 server {
    listen 443;
    server_name mypage.com;
    passenger_enabled on;
    rails_env    production;
    root         /home/deploy/mypage/current/public;

    # redirect server error pages to the static page /50x.html
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   html;
    }

    ssl                   on;
    ssl_certificate       /etc/ssl/certs/secure.mypage.com.1.2019.chain.crt;
    ssl_certificate_key   /etc/ssl/private/mypage.com.key;

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;


    ssl_prefer_server_ciphers     on;
    ssl_session_cache   shared:SSL:10m;
    ssl_session_timeout 10m;

 }

我用过这个指南https://www.youtube.com/watch?v=D2P5cRMi0fQ以及本指南http://nginx.org/en/docs/http/configuring_https_servers.html#optimization以供设置时参考。

答案1

你的私钥已加密，因此你必须在 nginx 启动或解密密钥之前输入密码

mv /etc/ssl/private/mypage.com.key /etc/ssl/private/mypage.com.org.key
openssl rsa -in /etc/ssl/private/mypage.com.org.key -out /etc/ssl/private/mypage.com.key
chmod 400 /etc/ssl/private/*.key

相关内容