nginx install ssl certificate
Keywords: pem turn crt, certificate renewal, nginx deployment ssl certificate, resolve SSL23_GET_SERVER_HELLOerrors.
1 year certificate expired before the free application, then the deployment of new applications for certificates today to the new server.
Download the certificate when the certificate is not found crt format, but pem format.
- Ali cloud their certificate program offers are not available crt format
- Direct configuration pem, put nginx in the next test, is not recognized.
- Nginx simplest configuration to no avail
- By openssl into the pem crt, it is invalid.
openssl x509 -outform der -in your-cert.pem -out your-cert.crt
Use openssl to convert pem crt direct result of the certificate authentication fails:
nginx: [emerg] cannot load certificate "/root/2961376_******.com.crt": PEM_read_bio_X509_AUX() failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: configuration file /etc/nginx/nginx.conf test failed
Several times suspected to be where the problem is, this is not a problem with the server? Or other environmental interference on the server?
- Always
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol, - Browser can not open.
bash-3.2$ curl https://www.******.com
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
Finally, how to solve
Try to upload the certificate to other businesses, which I uploaded to Tencent cloud. Then click download, yes, there crt downloadable format.
Then crt successful deployment ...
Ali Ali cloud cloud ah, a multi-format download will happen?