Nginx

添加ssl後Nginx不會重啟

  • May 29, 2017

我添加了一些修改到我的root@mypage:/etc/nginx/sites-available/default

當我這樣做時sudo service nginx restart ,伺服器會返回此錯誤:Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.

如果我執行nginx -t -c /etc/nginx/nginx.conf輸出是

Enter PEM pass phrase: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful

有人可以告訴我我做錯了什麼嗎?我這裡完全空白

這是root@mypage:/etc/nginx/sites-available/default文件

server {
   listen 80;
   listen [::]:80 default_server ipv6only=on;

   server_name mypage.com;
   passenger_enabled on;
   rails_env    production;
   root         /home/deploy/mypage/current/public;

   # redirect server error pages to the static page /50x.html
   error_page   500 502 503 504  /50x.html;
   location = /50x.html {
       root   html;
   }
}

server {
   listen 443;
   server_name mypage.com;
   passenger_enabled on;
   rails_env    production;
   root         /home/deploy/mypage/current/public;

   # redirect server error pages to the static page /50x.html
   error_page   500 502 503 504  /50x.html;
   location = /50x.html {
       root   html;
   }

   ssl                   on;
   ssl_certificate       /etc/ssl/certs/secure.mypage.com.1.2019.chain.crt;
   ssl_certificate_key   /etc/ssl/private/mypage.com.key;

   ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
   ssl_ciphers         HIGH:!aNULL:!MD5;


   ssl_prefer_server_ciphers     on;
   ssl_session_cache   shared:SSL:10m;
   ssl_session_timeout 10m;

}

我在設置過程中使用了本指南https://www.youtube.com/watch?v=D2P5cRMi0fQ>和本指南<http://nginx.org/en/docs/http/configuring_https_servers.html#optimization作為參考。

您的私鑰已加密,因此您必須在 nginx 啟動或解密密鑰之前輸入密碼

mv /etc/ssl/private/mypage.com.key /etc/ssl/private/mypage.com.org.key
openssl rsa -in /etc/ssl/private/mypage.com.org.key -out /etc/ssl/private/mypage.com.key
chmod 400 /etc/ssl/private/*.key

引用自:https://serverfault.com/questions/852843