ssl配置报错，求帮忙看看什么情况。。。。

zzr

    关键是证书在其他的vps  比如安装lnmp的阿里云都可以使用。。是不是我配置问题呢。


下面是报错信息。。。。

1. root@sfo1:/usr/local/nginx/conf# service nginx restart
   
2. Stoping nginx... nginx: [emerg] SSL_CTX_use_PrivateKey_file("/usr/local/nginx/conf/demo.key") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: ANY PRIVATE KEY error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib)
   
3. failed. Use force-quit
   
4. Starting nginx... nginx (pid 7272 7269) already running.

复制代码

wtycn

selinux ？

zzr

wtycn 发表于 2014-11-16 16:47
selinux ？

/etc/selinux/目录只有一个。。。。semanage.conf  

1. # Authors: Jason Tang <[email protected]>
   
2. #
   
3. # Copyright (C) 2004-2005 Tresys Technology, LLC
   
4. #
   
5. #  This library is free software; you can redistribute it and/or
   
6. #  modify it under the terms of the GNU Lesser General Public
   
7. #  License as published by the Free Software Foundation; either
   
8. #  version 2.1 of the License, or (at your option) any later version.
   
9. #
   
10. #  This library is distributed in the hope that it will be useful,
    
11. #  but WITHOUT ANY WARRANTY; without even the implied warranty of
    
12. #  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
    
13. #  Lesser General Public License for more details.
    
14. #
    
15. #  You should have received a copy of the GNU Lesser General Public
    
16. #  License along with this library; if not, write to the Free Software
    
17. #  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    
18. #
    
19. # Specify how libsemanage will interact with a SELinux policy manager.
    
20. # The four options are:
    
21. #
    
22. #  "source"     - libsemanage manipulates a source SELinux policy
    
23. #  "direct"     - libsemanage will write directly to a module store.
    
24. #  /foo/bar     - Write by way of a policy management server, whose
    
25. #                 named socket is at /foo/bar.  The path must begin
    
26. #                 with a '/'.
    
27. #  foo.com:4242 - Establish a TCP connection to a remote policy
    
28. #                 management server at foo.com.  If there is a colon
    
29. #                 then the remainder is interpreted as a port number;
    
30. #                 otherwise default to port 4242.
    
31. module-store = direct
    
32. 
    
33. # When generating the final linked and expanded policy, by default
    
34. # semanage will set the policy version to POLICYDB_VERSION_MAX, as
    
35. # given in <sepol/policydb.h>.  Change this setting if a different
    
36. # version is necessary.
    
37. #policy-version = 19

复制代码

qy117121

怀疑是换行符什么的问题
私钥和证书文件都重新建立试试

SKIDROW

openssl x509 -noout -modulus -in certificate.crt | openssl md5
openssl rsa -noout -modulus -in privateKey.key | openssl md5
openssl req -noout -modulus -in CSR.csr | openssl md5

检查是否一致