对于我可怜的英语抱歉抱歉,但我会尽我所能。 目前,我pipe理我的$ 5 DigitalOcean飞机上的2域,并使用Cloudflare作为我的DNSpipe理器灵活的SSLconfiguration,一切工作正常,直到我决定改变到完全SSLconfigurationSSL证书从Cloudflare(博客[dot] cloudflare [dot] com /通用的SSLencryption,所有的路到了原产地换免费/)。
比方说,我的域名是domain.com和example.com 。 当我通过HTTP访问它们都看起来很好。
但是,当我尝试从HTTPS访问它时,看起来很奇怪。
在这里我的nginx example.com.conf
server { listen 80; listen 443 ssl; server_name example.com; root /var/www/sites/example.com/; # Logging Settings access_log /var/www/logs/example.com-access.log; error_log /var/www/logs/example.com-error.log; location / { try_files $uri $uri/ /index.php; index index.php index.html index.htm; } #ssl on; ssl_certificate /var/www/certs/example.com.crt; ssl_certificate_key /var/www/certs/example.com.key; #ssl_session_timeout 5m; ssl_protocols SSLv3 TLSv1.2; ssl_ciphers AES256+RSA:!aNULL; ssl_prefer_server_ciphers on; # WordPress SEO rewrite ^/sitemap\.xml$ /sitemap_index.xml permanent; rewrite ^/sitemap_index\.xml$ /index.php?sitemap=1 last; rewrite ^/([^/]+?)-sitemap([0-9]+)?\.xml$ /index.php?sitemap=$1&sitemap_n=$2 last; include /var/www/sites/example.com/nginx.conf; include /etc/nginx/conf.d/error_page.conf; include /etc/nginx/conf.d/common.conf; include /etc/nginx/conf.d/phpcgi.conf; }
在这里从我的domain.com.conf
server { listen 80 default_server; listen 433 ssl; server_name domain.com; root /var/www/sites/domain.com/; # Logging Settings access_log /var/www/logs/domain.com-access.log; error_log /var/www/logs/domain.com-error.log; location / { index index.html index.htm; } #ssl on; ssl_certificate /var/www/certs/domain.com.crt; ssl_certificate_key /var/www/certs/domain.com.key; #ssl_session_timeout 5m; ssl_protocols SSLv3 TLSv1.2; ssl_ciphers AES256+RSA:!aNULL; ssl_prefer_server_ciphers on; include /etc/nginx/conf.d/error_page.conf; include /etc/nginx/conf.d/common.conf; #include /etc/nginx/conf.d/phpcgi.conf; }
在这里我的/etc/hosts文件
127.0.0.1 localhost domain.com example.com 123.456.789.987 domain.com example.com
谁有解决办法
PS。 我还不能发布链接。
谢谢 :)
回复@Ismooth(问题评论),谢谢。
你在你的domain.com.conf里有一个input错误
listen 433 ssl;应该listen 443 ssl;