Hi, I'm trying to configure 3 ssl sites under nginx

Question

Hi, I'm trying to configure 3 ssl sites under nginx

and have the ssl certs loaded accordingly to the domain name:
As now my default server config is:

server {
listen 1880;
listen 8443 ssl;

if ($host ~ ^www\.(?<domain>.+)$) {
rewrite / $scheme://$domain$request_uri permanent;
}
if ($scheme ~ http://) {
rewrite / https://$hostname:8443$request_uri permanent;
}
ssl_certificate /etc/letsencrypt/live/$hostname/cert.pem;
ssl_certificate_key /etc/letsencrypt/live/$hostname/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
root /var/www/html/cdbd/web;
index index.html;

I'm new to nginx and probably not seeing something, the cert for one domain work but not for the other 2 and fails with error 0200100D, file rights access, nginx is started as a service, as root, the owner of the cert files

0

08.04.2024

3 ответов

27 просмотров

Martin Rys

Стикер

0

7 месяцев назад

Martin Rys

Стикер

0

7 месяцев назад

Sebastian · Accepted Answer

Sebastian

The nginx is started as root, but it drops the permissions quickly after start. usually this is www-data. So the relevant owner of the certs is www-data. ssl_protocols should be tls1.3 and maybe 1.2, but everything else is an security issue

0

7 месяцев назад

Похожие чаты

Hi, I'm trying to configure 3 ssl sites under nginx

3 ответов

Похожие вопросы