浏览器报错信息
Nginx配置
数字证书的路径要使用绝对路径,例如:
ssl_certificate /usr/local/nginx/ssl/enginx.net.crt;
ssl_certificate_key /usr/local/nginx/ssl/enginx.net.key;
还有server_name不能用127.0.0.1,请使用域名,例如:
server_name enginx.net;
以下是我的SSL配置文件:
ssl on;
ssl_certificate /usr/local/nginx/ssl/enginx.net.crt;
ssl_certificate_key /usr/local/nginx/ssl/enginx.net.key;
ssl_buffer_size 16k;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:DES-CBC3-SHA;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_session_cache builtin:20480 shared:SSL:10m;
ssl_session_timeout 1h;
ssl_stapling on;
ssl_session_tickets on;
1 回答4.1k 阅读✓ 已解决
3 回答1.8k 阅读✓ 已解决
2 回答2.2k 阅读✓ 已解决
2 回答2.2k 阅读
1 回答1.4k 阅读✓ 已解决
2 回答1.1k 阅读
2 回答764 阅读
你不会是用IP地址直接访问的吧? 证书证明的是域名,一定要用证书绑定的域名访问。