ubuntu14 下 nginx 配置https访问不了问题解决和排查

最新推荐文章于 2025-04-28 16:16:29 发布

轻量开发

最新推荐文章于 2025-04-28 16:16:29 发布

阅读量1.8k

点赞数

CC 4.0 BY-SA版权

分类专栏：云服务器文章标签： nginx ubuntu https

本文链接：https://blog.youkuaiyun.com/nfq6612/article/details/88690824

云服务器专栏收录该内容

8 篇文章

订阅专栏

本文介绍了在Ubuntu14上配置Nginx HTTPS访问时遇到的问题及解决步骤，包括检查443端口的出站和入站规则，确保server_name配置正确，并提供了一份nginx.conf的参考代码。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1.检查443端口出站和入站规则是否好？

案例坑：我的入站配好，出站没有配好。http能访问，https访问不了。重新配置出站规矩加443端口后，还是不行，还需要重新启动ubuntu14系统，启动好后重新启动nginx 如果看到如下图：443端口已经运行起来了，然后重新访问https可以访问了。

2. server_name 后面跟的域名拼写是否正确

server_name www.xxxx.com;

3.nginx.conf参考代码


#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  www.diaozatian.top;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
		 proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Host  $http_host;
            proxy_set_header X-Nginx-Proxy true;
            proxy_set_header Connection "";
            proxy_pass http://127.0.0.1:3000;
            proxy_redirect default;
        }

    
    }


   server {
        listen       443 ssl;
        server_name  www.diaozatian.top;

        ssl_certificate      /usr/local/nginx/sbin/diaozatian.top.pem;
        ssl_certificate_key  /usr/local/nginx/sbin/diaozatian.top.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

		ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_prefer_server_ciphers  on;

        location / {
			proxy_set_header X-Real-IP $remote_addr;
            proxy_pass http://127.0.0.1:3000;

        }
    }

}