全球主机交流论坛
标题:
ssl配置报错,求帮忙看看什么情况。。。。
[打印本页]
作者:
zzr
时间:
2014-11-16 16:44
标题:
ssl配置报错,求帮忙看看什么情况。。。。
关键是证书在其他的vps 比如安装lnmp的阿里云都可以使用。。是不是我配置问题呢。
下面是报错信息。。。。
root@sfo1:/usr/local/nginx/conf# service nginx restart
Stoping nginx... nginx: [emerg] SSL_CTX_use_PrivateKey_file("/usr/local/nginx/conf/demo.key") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: ANY PRIVATE KEY error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib)
failed. Use force-quit
Starting nginx... nginx (pid 7272 7269) already running.
复制代码
作者:
wtycn
时间:
2014-11-16 16:47
selinux ?
作者:
zzr
时间:
2014-11-16 17:01
wtycn 发表于 2014-11-16 16:47
selinux ?
/etc/selinux/目录只有一个。。。。semanage.conf
# Authors: Jason Tang <
[email protected]
>
#
# Copyright (C) 2004-2005 Tresys Technology, LLC
#
# This library is free software; you can redistribute it and/or
# modify it under the terms of the GNU Lesser General Public
# License as published by the Free Software Foundation; either
# version 2.1 of the License, or (at your option) any later version.
#
# This library is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public
# License along with this library; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
#
# Specify how libsemanage will interact with a SELinux policy manager.
# The four options are:
#
# "source" - libsemanage manipulates a source SELinux policy
# "direct" - libsemanage will write directly to a module store.
# /foo/bar - Write by way of a policy management server, whose
# named socket is at /foo/bar. The path must begin
# with a '/'.
# foo.com:4242 - Establish a TCP connection to a remote policy
# management server at foo.com. If there is a colon
# then the remainder is interpreted as a port number;
# otherwise default to port 4242.
module-store = direct
# When generating the final linked and expanded policy, by default
# semanage will set the policy version to POLICYDB_VERSION_MAX, as
# given in <sepol/policydb.h>. Change this setting if a different
# version is necessary.
#policy-version = 19
复制代码
作者:
cosence
时间:
2014-11-16 17:05
提示:
作者被禁止或删除 内容自动屏蔽
作者:
qy117121
时间:
2014-11-16 20:30
怀疑是换行符什么的问题
私钥和证书文件都重新建立试试
作者:
SKIDROW
时间:
2014-11-17 09:00
openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5
检查是否一致
欢迎光临 全球主机交流论坛 (https://loc.mjj8.eu.org/)
Powered by Discuz! X3.4