nginx - 奇怪的ssl問題

Question

我遇到了一個奇怪的Nginx SSL問題，我似乎無法弄清楚。

發生了什麼事情是有些用戶在瀏覽「site2.com」時收到了無效的SSL證書錯誤，其中的錯誤是它說site2的SSL實際上是site1.com，所以出於某種原因，Nginx正在加載SSL site2的site1。

所以要排除故障，我嘗試從nginx配置中刪除整個「SITE_1」塊，然後site2.com根本不會加載。所以我對我做錯了什麼感到困惑。

有人能幫助我嗎？

# SITE_1 
server { 
    listen   443; 
    ssl      on; 
    server_name site1.com; 

    client_max_body_size 10M; 
    client_body_buffer_size 128k; 

    ssl_certificate /home/sites/conf/ssl_site1.crt; 
    ssl_certificate_key /home/sites/conf/ssl_site1.key; 
    ssl_session_timeout 25m; 

    ssl_protocols SSLv2 SSLv3 TLSv1; 
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; 
    ssl_prefer_server_ciphers on; 

    location/{ 
     proxy_set_header Host $host; 
     proxy_set_header X-Real-IP $remote_addr; 
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
     proxy_read_timeout 240; 
     proxy_connect_timeout 240; 
     proxy_send_timeout 240; 
     send_timeout 240; 
     proxy_pass http://apache_server; 
    } 
} 



# SITE_2 
server { 
    listen  443; 
    server_name site2.com; 

    client_max_body_size 10M; 
    client_body_buffer_size 128k; 

    ssl_certificate /home/sites/conf/ssl_site2.crt; 
    ssl_certificate_key /home/sites/conf/ssl_site2.key; 
    ssl_session_timeout 25m; 

    ssl_protocols SSLv2 SSLv3 TLSv1; 
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP; 
    ssl_prefer_server_ciphers on; 

    gzip    on; 
    gzip_static  on; 
    gzip_buffers  16 8k; 
    gzip_comp_level 9; 
    gzip_http_version 1.0; 
    gzip_min_length 0; 
    gzip_types  text/plain text/css application/x-javascript; 
    gzip_vary   on; 

    location/{ 
     proxy_set_header Host $host; 
     proxy_set_header X-Real-IP $remote_addr; 
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
     proxy_read_timeout 240; 
     proxy_connect_timeout 240; 
     proxy_send_timeout 240; 
     send_timeout 240; 
     proxy_pass http://apache_server; 
    } 
} 

Answer 1

看起來像site2服務器聲明缺少ssl on;配置。在site1中，您直接在listen之下。