文章内容
2018/9/28 23:54:23,作 者: 黄兵
SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE
在上一篇文章中将openssl转换pem为crt，转换成功之后，修改nginx配置文件，保存之后测试nginx配置，但是报如下错误：
SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE
具体如图所示：
解决方案：
配置nginx不一定非要crt文件，pem文件也可以，具体配置写法如下：
server {
listen 443 ssl;
ssl_certificate /etc/ssl/private/full_chain.pem;
ssl_certificate_key /etc/ssl/private/2_wander.materialtools.com.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
server_name www.xxx.com;
location / {
try_files $uri @gunicorn_proxy;
}
location @gunicorn_proxy {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $http_host;
proxy_redirect off;
proxy_pass http://127.0.0.1:5000;
proxy_connect_timeout 500s;
proxy_read_timeout 500s;
proxy_send_timeout 500s;
}
}再次测试，问题已经解决了，截图如下：
参考资料：Nginx SSL安装pem证书
黄兵个人博客原创。
转载请注明出处：黄兵个人博客 - SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line:Expecting: TRUSTED CERTIFICATE
评论列表