nginx 启用 https , 403 forbidden - V2EX
shotego
V2EX    NGINX

nginx 启用 https , 403 forbidden

  •  
  •   shotego Dec 4, 2015 10709 views
    This topic created in 3817 days ago, the information mentioned may be changed or developed.

    用 letsencrypt 弄了证书,然后准备配置 nginx 。
    配置文件如下,然后用 http 正常访问, https 出现 403 。网上爬帖子说权限问题,或者 index.php 问题。权限什么的应该没有问题啊。添加 index index.php ,用 https 访问,浏览器直接把我的 index.php 下载下来了。。。
    建站新手,很多东西还在学,这个配置也是参照别人的。求解哪里不对了
    server
    {
    listen 80;
    #listen [::]:80;
    server_name www.forloop.top forloop.top;
    index index.html index.htm index.php default.html default.htm default.php;
    root /home/wwwroot/www.forloop.top;
    include wordpress.conf;
    #error_page 404 /404.html;
    location ~ [^/].php(/|$)
    {
    # comment try_files $uri =404; to enable pathinfo
    try_files $uri =404;
    fastcgi_pass unix:/tmp/php-cgi.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
    #include pathinfo.conf;
    }
    location ~ ..(gif|jpg|jpeg|png|bmp|swf)$
    {
    expires 30d;
    }
    location ~ .
    .(js|css)?$
    {
    expires 12h;
    }
    access_log off;
    }
    server{
    listen 443;
    root /home/wwwroot/www.forloop.top;
    server_name www.forloop.top;
    ssl on;
    ssl_certificate /etc/letsencrypt/live/forloop.top/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/forloop.top/privkey.pem;
    }

    14 replies    2015-12-04 19:46:49 +08:00
    xiaoz
        1
    xiaoz  
       Dec 4, 2015 via Android
    你这个配置是同时启用 http 和 https 吧,你把 ssl on;注释后重启下 nginx 试试。
    shotego
        2
    shotego  
    OP
       Dec 4, 2015
    @xiaoz 注释掉了,还是没有用
    fangdingjun
        3
    fangdingjun  
       Dec 4, 2015   1
    你把 http 部分的配置复制一遍,然后改端口,加 ssl 配置就行了
    现在的配置,只支持静态文件
    47jm9ozp
        4
    47jm9ozp  
       Dec 4, 2015
    你的 ssl 段根本就没启用 php 解析等东西啊……
    shotego
        5
    shotego  
    OP
       Dec 4, 2015
    @fangdingjun 谢谢,已经可以了。不过有一个新问题,为什么只有首页的锁是绿的?其他的是感叹号呢?
    squid157
    &nsp;   6
    squid157  
       Dec 4, 2015 via iPhone
    @shotego 静态资源非 https 你得改内容
    ryd994
        7
    ryd994  
       Dec 4, 2015
    @fangdingjun 不用复制
    原来的配置加个 listen 就好了
    listen 443 ssl;

    新手教程害人不浅, ssl on 都废弃了多久的选项了。。。
    bidu
        8
    bidu  
       Dec 4, 2015 via Android
    @shotego 看看引用的外部文件是不是 https
    shotego
        9
    shotego  
    OP
       Dec 4, 2015
    @bidu 懂了,谢谢
    shotego
        10
    shotego  
    OP
       Dec 4, 2015
    @ryd994 确实如你所说,谢谢。配置好了,并且换成了强制跳转 https
    ryd994
        11
    ryd994  
       Dec 4, 2015
    @shotego 非 https 引用可以把链接改成 //开头解决,比如 //a.com/b.js
    referblue
        12
    referblue  
       Dec 4, 2015
    真能折腾,都用上 Let's Encrypt 了,三个月一更新?
    Andy1999
        13
    Andy1999  
       Dec 4, 2015 via iPhone
    location ~ [^/].php(/|$)
    {
    # comment try_files $uri =404; to enable pathinfo
    try_files $uri =404;
    fastcgi_pass unix:/tmp/php-cgi.sock;
    fastcgi_index index.php;
    include fastcgi.conf;
    #include pathinfo.conf;
    }
    location ~ ..(gif|jpg|jpeg|png|bmp|swf)$
    {
    expires 30d;
    }
    location ~ ..(js|css)?$
    {
    expires 12h;
    }
    access_log off;

    加在后面
    LEFT
        14
    LEFT  
       Dec 4, 2015 via iPhone
    @shotego http 301 到 https 就绿了,
    About     Help     Advertise     Blog     API     FAQ     Solana     952 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 46ms UTC 22:44 PVG 06:44 LAX 15:44 JFK 18:44
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86