SSL鏈不完整

在使用Let's Encrypt創建7個SSL證書後，我偶然發現了這個錯誤。我已將所有配置設置爲正確，並且我掃描了整個站點上的[SSLLabs.com][1]上的SSL漏洞，並告訴我我的服務器的證書鏈不完整。SSL鏈不完整

我正在CentOS Linux release 7.2.1511 (Core)作爲反向代理的nginx。我的配置是：

# GhostAntiDDoS 
server { 
    listen 443 ssl; 
    server_name ghostantiddos.com *.ghostantiddos.com; 
    ssl on; 
    ssl_certificate /etc/letsencrypt/live/ghostantiddos.com/cert.pem; 
    ssl_certificate_key /etc/letsencrypt/live/ghostantiddos.com/privkey.pem; 
    ssl_dhparam /etc/ssl/certs/dhparam.pem; 
    ssl_session_timeout 5m; 
    ssl_prefer_server_ciphers on; 
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
    ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; 
    add_header Strict-Transport-Security max-age=15768000; 
    # Bulletin 
    #limit_conn conn_limit_per_ip 10; 
    #limit_req zone=req_limit_per_ip burst=5 nodelay; 
    client_body_timeout 5s; 
    client_header_timeout 5s; 
    ....

其餘的部分是隱藏的，因爲它們會暴露我的起源。如果有人能幫助我，我會很棒！

來源

2016-09-13 CrAzYz_

更換

certificate /etc/letsencrypt/live/ghostantiddos.com/cert.pem

通過

certificate /etc/letsencrypt/live/ghostantiddos.com/fullchain.pem

然後用https://ssllabs.com

來源

2016-09-13 13:46:57 Tom

再次測試謝謝！它運作良好！我想我的證書有問題，或者我偶然混淆了他們。 –

回答

相關問題