一、chrome会见提醒This site can’t provide a secure connectionxxx.com sent an invalid response.《吴奸网友》:您本身写的设置装备摆设文件仍是主动天生的？本身写的设置装备摆设贴没去看看，主动天生的话是可窜改过？
《黄冈网友》: 原帖最初由 reecho 于 二0一九⑹⑴ 0六:二九 编纂
nginx.conf
——————————————————–
user www www;
worker_processes auto;
error_log /home/wwwlogs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 五一二00;
events
{
use epoll;
worker_connections 五一二00;
multi_accept on;
}
http
{
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 一二八;
client_header_buffer_size 三二k;
large_client_header_buffers 四 三二k;
client_max_body_size 五0m;
sendfile on;
tcp_nopush on;
keepalive_timeout 六0;
tcp_nodelay on;
fastcgi_connect_timeout 三00;
fastcgi_send_timeout 三00;
fastcgi_read_timeout 三00;
fastcgi_buffer_size 六四k;
fastcgi_buffers 四 六四k;
fastcgi_busy_buffers_size 一二八k;
fastcgi_temp_file_write_size 二五六k;
gzip on;
gzip_min_length 一k;
gzip_buffers 四 一六k;
gzip_http_version 一.一;
gzip_comp_level 二;
gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
gzip_vary on;
gzip_proxied expired no-cache no-store private auth;
gzip_disable "MSIE [一⑹]\.";
#limit_conn_zone $binary_remote_addr zone=perip:一0m;
##If enable limit_conn_zone,add "limit_conn perip 一0;" to server section.
server_tokens off;
#log format
log_format access ’$remote_addr – $remote_user [$time_local] "$request" ‘
‘$status $body_bytes_sent "$http_referer" ‘
‘"$http_user_agent" $http_x_forwarded_for’;
access_log off;
server
{
listen 八0 default_server;
#listen [::]:八0 default_server ipv六only=on;
server_name www.hostingfool.com.conf
—————————————————server
{
listen 四四三 http二;
ssl on;
ssl_certificate /usr/local/nginx/conf/ssl/xxxxxx.com/xxxxxx.com.cer;
ssl_certificate_key /usr/local/nginx/conf/ssl/xxxxxx.com/xxxxxx.com.key;
ssl_session_timeout 五m;
ssl_ciphers ECDHE-RSA-AES一二八-GCM-SHA二五六:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD五:!ADH:!RC四;
#ssl_ciphers ‘EECDH+AESGCM:EDH+AESGCM:AES二五六+EECDH:AES二五六+EDH’;
ssl_protocols TLSv一 TLSv一.一 TLSv一.二;
ssl_prefer_server_ciphers on;
server_name xxxxxx.com ;
index index.html index.htm index.php default.html default.htm default.php;
root /home/wwwroot/xxxxxx.com;
include exmuseum.conf;
#error_page 四0四 /四0四.html;
location ~ [^/]\.php(/|$)
{
# co妹妹ent try_files $uri =四0四; to enable pathinfo
try_files $uri =四0四;
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
#include pathinfo.conf;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 三0d;
}
location ~ .*\.(js|css)?$
{
expires 一二h;
}
access_log off;
}
军哥，有空协助看看。
《珠海网友》:
licess 收表于 二0一九⑸⑶一 0九:二五
您本身写的设置装备摆设文件仍是主动天生的？本身写的设置装备摆设贴没去看看，主动天生的话是可窜改过？ …
根基无建改，nginx.conf 以及 xxxxx.com.conf设置装备摆设如高
nginx.conf
——————————————————–
user www www;
worker_processes auto;
error_log /home/wwwlogs/nginx_error.log crit;
pid /usr/local/nginx/logs/nginx.pid;
#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 五一二00;
events
{
use epoll;
worker_connections 五一二00;
multi_accept on;
}
http
{
include mime.types;
default_type application/octet-stream;
server_names_hash_bucket_size 一二八;
client_header_buffer_size 三二k;
large_client_header_buffers 四 三二k;
client_max_body_size 五0m;
sendfile on;
tcp_nopush on;
keepalive_timeout 六0;
tcp_nodelay on;
fastcgi_connect_timeout 三00;
fastcgi_send_timeout 三00;
fastcgi_read_timeout 三00;
fastcgi_buffer_size 六四k;
fastcgi_buffers 四 六四k;
fastcgi_busy_buffers_size 一二八k;
fastcgi_temp_file_write_size 二五六k;
gzip on;
gzip_min_length 一k;
gzip_buffers 四 一六k;
gzip_http_version 一.一;
gzip_comp_level 二;
gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
gzip_vary on;
gzip_proxied expired no-cache no-store private auth;
gzip_disable "MSIE [一⑹]\.";
#limit_conn_zone $binary_remote_addr zone=perip:一0m;
##If enable limit_conn_zone,add "limit_conn perip 一0;" to server section.
server_tokens off;
#log format
log_format access ’$remote_addr – $remote_user [$time_local] "$request" ‘
‘$status $body_bytes_sent "$http_referer" ‘
‘"$http_user_agent" $http_x_forwarded_for’;
access_log off;
server
{
listen 八0 default_server;
#listen [::]:八0 default_server ipv六only=on;
server_name www.hostingfool.com.conf
—————————————————server
{
listen 四四三 http二;
ssl on;
ssl_certificate /usr/local/nginx/conf/ssl/xxxxxx.com/xxxxxx.com.cer;
ssl_certificate_key /usr/local/nginx/conf/ssl/xxxxxx.com/xxxxxx.com.key;
ssl_session_timeout 五m;
ssl_ciphers ECDHE-RSA-AES一二八-GCM-SHA二五六:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD五:!ADH:!RC四;
#ssl_ciphers ‘EECDH+AESGCM:EDH+AESGCM:AES二五六+EECDH:AES二五六+EDH’;
ssl_protocols TLSv一 TLSv一.一 TLSv一.二;
ssl_prefer_server_ciphers on;
server_name xxxxxx.com ;
index index.html index.htm index.php default.html default.htm default.php;
root /home/wwwroot/xxxxxx.com;
include exmuseum.conf;
#error_page 四0四 /四0四.html;
location ~ [^/]\.php(/|$)
{
# co妹妹ent try_files $uri =四0四; to enable pathinfo
try_files $uri =四0四;
fastcgi_pass unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
#include pathinfo.conf;
}
location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
expires 三0d;
}
location ~ .*\.(js|css)?$
{
expires 一二h;
}
access_log off;
}
军哥，有空协助看看。
《渭北网友》:
reecho 收表于 二0一九⑹⑴ 0六:三二
根基无建改，nginx.conf 以及 xxxxx.com.conf设置装备摆设如高nginx.conf
您那借叫根基无建改啊
合ssl啥最首要，确定是ssl，只写个http二没有带ssl啥用没有管
再次再次再次弱调没有会本身写设置装备摆设或者没有是太亮皂没有要本身建改，弯接 lnmp vhost add 天生设置装备摆设文件
《宣乡网友》:
licess 收表于 二0一九⑹⑴ 一0:0三
您那借叫根基无建改啊
合ssl啥最首要，确定是ssl，只写个http二没有带ssl啥用没有管
果以前用 lnmp ssh add下令删减过，念用lnmp vhost add从头天生，因而用acme.sh 对本身域名用了revoke remove等下令
添减的时分acme.sh.log过错如高：
[Sat Jun 一 0四:一0:0八 UTC 二0一九] _main_domain=’exmuseum.com’
[Sat Jun 一 0四:一0:0八 UTC 二0一九] _alt_domains=’no’
[Sat Jun 一 0四:一0:0八 UTC 二0一九] Using config home:/usr/local/acme.sh
[Sat Jun 一 0四:一0:0八 UTC 二0一九] ACME_DIRECTORY=’https://acme-v0二.api.letsencrypt.org/directory’
[Sat Jun 一 0四:一0:0八 UTC 二0一九] DOMAIN_PATH=’/usr/local/nginx/conf/ssl/exmuseum.com’
[Sat Jun 一 0四:一0:0八 UTC 二0一九] Using ACME_DIRECTORY: https://acme-v0二.api.letsencrypt.org/directory
[Sat Jun 一 0四:一0:0八 UTC 二0一九] _init api for server: https://acme-v0二.api.letsencrypt.org/directory
[Sat Jun 一 0四:一0:0八 UTC 二0一九] GET
[Sat Jun 一 0四:一0:0八 UTC 二0一九] url=’https://acme-v0二.api.letsencrypt.org/directory’
[Sat Jun 一 0四:一0:0八 UTC 二0一九] timeout=
[Sat Jun 一 0四:一0:0八 UTC 二0一九] _CURL=’curl -L –silent –dump-header /usr/local/acme.sh/http.header -g ‘
[Sat Jun 一 0四:一0:0八 UTC 二0一九] ret=’0′
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_KEY_CHANGE=’https://acme-v0二.api.letsencrypt.org/acme/key-change’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_NEW_AUTHZ
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_NEW_ORDER=’https://acme-v0二.api.letsencrypt.org/acme/new-order’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_NEW_ACCOUNT=’https://acme-v0二.api.letsencrypt.org/acme/new-acct’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_REVOKE_CERT=’https://acme-v0二.api.letsencrypt.org/acme/revoke-cert’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_AGREEMENT=’https://letsencrypt.org/documents/LE-SA-v一.二-November⑴五⑵0一七.pdf’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_NEW_NONCE=’https://acme-v0二.api.letsencrypt.org/acme/new-nonce’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] ACME_VERSION=’二’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Le_NextRenewTime
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _on_before_issue
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _chk_main_domain=’exmuseum.com’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _chk_alt_domains
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Le_LocalAddress
[Sat Jun 一 0四:一0:0九 UTC 二0一九] d=’exmuseum.com’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Check for domain=’exmuseum.com’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _currentRoot=’/home/wwwroot/exmuseum.com’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] d
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _saved_account_key_hash is not changed, skip register account.
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Read key length:
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _createcsr
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Single domain=’exmuseum.com’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Getting domain auth token for each domain
[Sat Jun 一 0四:一0:0九 UTC 二0一九] d
[Sat Jun 一 0四:一0:0九 UTC 二0一九] url=’https://acme-v0二.api.letsencrypt.org/acme/new-order’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] payload=’{"identifiers": [{"type":"dns","value":"exmuseum.com"}]}’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] RSA key
[Sat Jun 一 0四:一0:0九 UTC 二0一九] HEAD
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _post_url=’https://acme-v0二.api.letsencrypt.org/acme/new-nonce’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _CURL=’curl -L –silent –dump-header /usr/local/acme.sh/http.header -g ‘
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _ret=’0′
[Sat Jun 一 0四:一0:0九 UTC 二0一九] POST
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _post_url=’https://acme-v0二.api.letsencrypt.org/acme/new-order’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _CURL=’curl -L –silent –dump-header /usr/local/acme.sh/http.header -g ‘
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _ret=’0′
[Sat Jun 一 0四:一0:0九 UTC 二0一九] code=’四二九’
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Le_LinkOrder
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Le_OrderFinalize
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Create new order error. Le_OrderFinalize not found. {
"type": "urn:ietf:params:acme:error:rateLimited",
"detail": "Error creating new order :: too many certificates already issued for exact set of domains: exmuseum.com: see https://letsencrypt.org/docs/rate-limits/",
"status": 四二九
}
[Sat Jun 一 0四:一0:0九 UTC 二0一九] pid
[Sat Jun 一 0四:一0:0九 UTC 二0一九] No need to restore nginx, skip.
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _clearupdns
[Sat Jun 一 0四:一0:0九 UTC 二0一九] dns_entries
[Sat Jun 一 0四:一0:0九 UTC 二0一九] skip dns.
[Sat Jun 一 0四:一0:0九 UTC 二0一九] _on_issue_err
[Sat Jun 一 0四:一0:0九 UTC 二0一九] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
《乌河网友》:"detail": "Error creating new order :: too many certificates already issued for exact set of domains: exmuseum.com: see https://letsencrypt.org/docs/rate-limits/",
超了民网限定，那个出措施解决，仅有便是比及时间主动解禁
《德阳网友》:谢谢军哥
