Welcome! Log In Create A New Profile

Advanced

400 Bad RequestThe SSL certificate error

February 27, 2018 09:30AM
Добрый день!
Есть проблема.
Есть vps с vestacp. На ней несколько доменов.
На одном из них включил ssl через Lets Encrypt.
Также включен - Поддержка ProxyNGINX
Создал сертификат CA, подписал и отдал пользователю сертификат.
При заходе на сайт, требует сертификат, его выбираю, и потом ошибка 400 Bad RequestThe SSL certificate error
вот мой конфиг
server {
listen *****:443;
server_name ***.tk www.***.tk;
ssl on;
ssl_certificate /home/admin/conf/web/ssl.***.tk.pem; - тут сертификаты Lets Encrypt
ssl_certificate_key /home/admin/conf/web/ssl.***.tk.key; тут сертификаты Lets Encrypt
ssl_client_certificate /etc/ssl/***.tk/ca.crt; - тут мой
ssl_verify_client on;
ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AES:!ECDH+3DES:!DH+3DES:!RSA+3DES:!aNULL:!MD5:!DSS;
ssl_verify_depth 1;
keepalive_timeout 70;
fastcgi_param SSL_VERIFIED $ssl_client_verify;
fastcgi_param SSL_CLIENT_SERIAL $ssl_client_serial;
fastcgi_param SSL_CLIENT_CERT $ssl_client_cert;
fastcgi_param SSL_DN $ssl_client_s_dn;
error_log /var/log/httpd/domains/****.tk.error.log error;

location / {
proxy_pass https://*****:8443;
location ~* ^.+\.(jpg|jpeg|gif|png|ico|svg|css|zip|tgz|gz|rar|bz2|exe|pdf|doc|xls|ppt|txt|odt|ods|odp|odf|tar|bmp|rtf|js|mp3|avi|mpeg|flv|html|htm)$ {
root /home/admin/web/****.tk/public_html;
access_log /var/log/httpd/domains/***.tk.log combined;
access_log /var/log/httpd/domains/***.tk.bytes bytes;

expires max;
try_files $uri @fallback;
}
}

location /error/ {
alias /home/admin/web/***.tk/document_errors/;
}

location @fallback {
proxy_pass https://*****:8443;
}

location ~ /\.ht {return 404;}
location ~ /\.svn/ {return 404;}
location ~ /\.git/ {return 404;}
location ~ /\.hg/ {return 404;}
location ~ /\.bzr/ {return 404;}

include /home/admin/conf/web/snginx.***.tk.conf*;
}
В чем может быть дело?
Subject Author Posted

400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 09:30AM

Re: 400 Bad RequestThe SSL certificate error

Maxim Dounin February 27, 2018 10:34AM

Re: 400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 10:50AM

Re: 400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 10:51AM

Re: 400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 11:17AM

Re: 400 Bad RequestThe SSL certificate error

Maxim Dounin February 27, 2018 12:42PM

Re: 400 Bad RequestThe SSL certificate error

Maxim Dounin February 27, 2018 12:54PM

Re: 400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 01:09PM

Re: 400 Bad RequestThe SSL certificate error

Maxim Dounin February 27, 2018 01:04PM

Re: 400 Bad RequestThe SSL certificate error

monah1983 February 27, 2018 01:49PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 86
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready