I can't get SSL work on my domain. I just get 102 connection refused.
Here is the config:
server {
listen 443 default_server ssl;
ssl_certificate /etc/nginx/ssl/www.foreningsdriv.se.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;
#if the URL with .php tacked on is a valid PHP file, rewrite the URL to .php
if (-f $document_root$uri.php) {
rewrite ^(.*)$ /$uri.php;
}
root /var/www/foreningsdriv.se;
index index.php index.html index.htm;
server_name www.foreningsdriv.se;
location / {
try_files $uri $uri/ /index.html;
}
error_page 404 /404.html;
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
location ~ \.php$ {
#fastcgi_pass 127.0.0.1:9000;
# With php5-fpm:
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}
Can anyone see anything wrong?
I have tried reissue the certficate but it doesn't help.
Specifies a file with trusted CA certificates in the PEM format used to verify client certificates and OCSP responses if ssl_stapling is enabled. The list of certificates will be sent to clients. If this is not desired, the ssl_trusted_certificate directive can be used.
Specifies whether to use the server's SSL cipher preferences, rather than the client's. This parameter can only be set in the postgresql. conf file or on the server command line. The default is on . Older PostgreSQL versions do not have this setting and always use the client's preferences.
You should remove passphrase from your private key.
openssl rsa -in original.key -out unencripted.key
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With