Nginx配置SSL证书报错ERR_SSL_PROTOCOL_ERROR

文章

林里克斯

88字数

Linux,Nginx

Nginx配置SSL证书报错ERR_SSL_PROTOCOL_ERROR解决方法

报错信息：

解决方法：

首先确认Nginx的版本

$ nginx -v

nginx version: nginx/1.19.0

如果版本是 1.15 版本前，修改配置文件加上 ssl on;

server
    {
    listen 443;
    server_name www.kjarbo.com kjarbo.com;
    index index.php index.html index.htm default.php default.htm default.html;
    root /usr/www/blog;

    ssl on;    #1.15版本前加上这里

    #HTTP_TO_HTTPS_START
    if ($server_port !~ 443){
        rewrite ^(/.*)$ https://$host$1 permanent;
    }
    #HTTP_TO_HTTPS_END
    ssl_certificate         #证书路径;
    ssl_certificate_key     #证书私钥路径
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    error_page 497  https://$host$request_uri;
}

在 1.15 版本后修改了这个方式,需在监听端口侧加上 listen 443 ssl;

server
    {
    listen 443 ssl;
    server_name www.kjarbo.com kjarbo.com;
    index index.php index.html index.htm default.php default.htm default.html;
    root /usr/www/blog;

    #HTTP_TO_HTTPS_START
    if ($server_port !~ 443){
        rewrite ^(/.*)$ https://$host$1 permanent;
    }
    #HTTP_TO_HTTPS_END
    ssl_certificate         #证书路径;
    ssl_certificate_key     #证书私钥路径
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    error_page 497  https://$host$request_uri;
}