所以我只集成了我的证书，当我重新启动时，我的nginx confvalidation了它。 当我做一个：
netstat -anp | grep 443 它返回：
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 22241/nginx
但是，当我尝试在浏览器上达到它时，它只是超时。
我的nginx conf是：
http { server_names_hash_bucket_size 64; server { listen 80; listen 443 ssl; fastcgi_param HTTPS on; server_name www.example.com example.com; ssl on; ssl_certificate /root/ssl/example_com/example.com.chained.crt; ssl_certificate_key /root/ssl/example_com/example.com.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; #rewrite ^/(.*) https://example.com/$1 permanent; location / { # Works on port 80.... } } } events { worker_connections 1024; }
除了iv'd设置ufw在我的服务器上，我打开了端口22,80和443。
TCP DUMP
14:43:33.951775 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216993490 ecr 0,sackOK,eol], length 0 14:43:34.980760 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216994490 ecr 0,sackOK,eol], length 0 14:43:36.052331 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216995490 ecr 0,sackOK,eol], length 0 14:43:37.101006 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216996490 ecr 0,sackOK,eol], length 0 14:43:38.140117 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216997490 ecr 0,sackOK,eol], length 0 14:43:39.210849 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 216998491 ecr 0,sackOK,eol], length 0 14:43:40.688591 IP LOCALIP.54653 > HOSTIP.443: Flags [S], seq 743769181, win 65535, options [mss 1460,sackOK,eol], length 0 14:43:41.311110 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 217000492 ecr 0,sackOK,eol], length 0 14:43:43.368351 IP LOCALIP.54660 > HOSTIP.443: Flags [S], seq 797790670, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 217002440 ecr 0,sackOK,eol], length 0 14:43:43.419444 IP LOCALIP.54661 > HOSTIP.443: Flags [S], seq 2577678109, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 217002490 ecr 0,sackOK,eol], length 0 14:43:45.534502 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 217004492 ecr 0,sackOK,eol], length 0 14:43:53.981084 IP LOCALIP.54664 > HOSTIP.443: Flags [S], seq 3123601024, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 217012492 ecr 0,sackOK,eol], length 0
会是什么呢？
为了确定数据包是否真的到达你的服务器，运行
tcpdump -ni <outer network interface> host <IP of remote client> and port 443
例如：
tcpdump -ni eth0 host 12.34.56.78 and port 443
如果看到数据包，那么防火墙出现问题。
如果没有，那么你的客户端和networking服务器之间就存在连接问题。
为了解决这个问题，你可以运行在客户端上：
tracert <webserver's IP> （在Windows上）
要么
traceroute <webserver's IP> （在Unix上）
保存输出到文件并呼叫您的ISP /networkingpipe理员/其他关心的人。 他们可能会要求追踪 – 你把它保存在文件中。