E22- 解决微信小程序要求的TLS版本必须大于等于1.2的问题(request fail ssl hand shake error)

有报错:request fail ssl hand shake error

openSSL 版本 1.0.1+

openssl version -a  查看

另nginx的配置文件改为

        ssl_protocols  TLSv1.2;   ###本来有TLSv1 TLSv1.1  的,直接删除既可
        ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
        ssl_prefer_server_ciphers  on;

配置证书改为:

ssl_certificate      /xxx/xxx/server.pem;
ssl_certificate_key   /xxx/xxx/server.key;

问题解决

猜你喜欢

转载自my.oschina.net/u/3635512/blog/1789158