Warning: file_get_contents(/data/phpspider/zhask/data//catemap/9/security/4.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Security NGINX SSL仅针对特定域存在错误ERR_SSL_VERSION_或_CIPHER_不匹配_Security_Ssl_Nginx_Ssl Certificate_Cloudflare - Fatal编程技术网

Security NGINX SSL仅针对特定域存在错误ERR_SSL_VERSION_或_CIPHER_不匹配

Security NGINX SSL仅针对特定域存在错误ERR_SSL_VERSION_或_CIPHER_不匹配,security,ssl,nginx,ssl-certificate,cloudflare,Security,Ssl,Nginx,Ssl Certificate,Cloudflare,不幸的是,使用cloudflare获得了错误\u SSL\u版本\u或\u密码\u不匹配 这是一个类似以下内容的节目: Unsupported protocol The client and server don't support a common SSL protocol version or cipher suite. 我正在使用多域假定example1.com和example2.com。 example1和example2具有相同的配置,当然除了server\u name及其cert/

不幸的是,使用cloudflare获得了
错误\u SSL\u版本\u或\u密码\u不匹配
这是一个类似以下内容的节目:

Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.
我正在使用多域假定
example1.com
example2.com
example1
example2
具有相同的配置,当然除了
server\u name
及其
cert/private
pem之外

example1
工作做得很好。 但是
example2
显示了
ERR\u SSL\u VERSION\u或\u CIPHER\u不匹配

我所做的:

  • 清除SSL状态、cookie和浏览器缓存
  • 使用
    sslshopper
    检查证书,但似乎只有在
    example2
    中才出现了故障
  • 使用NGINX作为web服务器

    下面是一个配置片段:

    nginx.conf

    ...
    http {
      ...
      # SSL Settings
      ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
      ssl_prefer_server_ciphers on;
      ssl_session_cache   shared:SSL:10m;
      ssl_ciphers TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256;
      ...
      include /etc/nginx/cloudflare.inc;
      include /etc/nginx/conf.d/*.conf;
    } 
    
    示例1.conf

    server {
        listen 443 ssl;
        server_name example1.com www.example1.conf;
    
        ssl_certificate /etc/pki/tls/certs/example1.crt;
        ssl_certificate_key /etc/pki/tls/private/example1.crt;
    
        root /usr/share/nginx/html/example1;
        index index.html;
    
        location / {
            try_files $uri $uri/ /index.html;
        }
    
    }