直接上nginx配置，大家看看有没有问题呢
root用户运行
test.conf
server{ listen443 ssl; server_nameauth-api.dataflux.cn; ssl_certificate /tmp/server.crt; ssl_certificate_key /tmp/server.key; location / { root /root/nginx/dist/; indexindex.html index.htm; } location /server_status { stub_status on; access_log off; } }
重启nginx
[root conf.d]# service nginx restartRedirecting to /bin/systemctl restart nginx.serviceJob for nginx.service failedbecause thecontrol processexited witherror code. See "systemctl status nginx.service"and "journalctl -xe"for details.
查看日志
journalctl -xe-u nginx
说是 /tmp/server.crt 文件不能加载
但是证书文件都是存在的
[root@izbp152ke14timzud0du15z conf.d]# ls -l /tmp/server.crt /tmp/server.key-rw-r--r--1 root root 1399 Nov 621:56 /tmp/server.crt -rw-r--r--1 root root 1679 Nov 621:56 /tmp/server.key
验证下nginx配置文件是不是有问题，那么测试一下，居然报错了
[root@izbp152ke14timzud0du15z conf.d]# nginx -tc /etc/nginx/conf.d/test.confnginx: [emerg] "server" directive is not allowed here in /etc/nginx/conf.d/test.conf:1 nginx: configuration file /etc/nginx/conf.d/test.conf test failed
但是我实在想不出有什么错误，网上查找了下，测试配置文件，不能这样测试，要测试 nginx.conf 文件才算是完整的测试
[root@izbp152ke14timzud0du15z conf.d]# nginx -tc /etc/nginx/nginx.confnginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful
目前语法没有错误，就是NGINX 报错起不来，提示 /tmp/server.crt 文件加载不了，于是我把证书相关文件拷贝到其它目录去了(想到这一步花了挺长时间，流泪)
server{ listen443 ssl; server_nameauth-api.dataflux.cn; ssl_certificate /root/dac/server.crt; ssl_certificate_key /root/dac/server.key; location / { root /root/nginx/dist/; indexindex.html index.htm; } location /server_status { stub_status on; access_log off; } }
再次测试并重启nginx，竟然成功启动了，难道是 /tmp 目录没有权限，不可能啊，是root啊，是因为这是临时目录吗，我竟然踩了这样一个坑
[root@izbp152ke14timzud0du15z conf.d]# nginx -tc /etc/nginx/nginx.confnginx: the configuration file /etc/nginx/nginx.conf syntax is ok nginx: configuration file /etc/nginx/nginx.conf test is successful [root@izbp152ke14timzud0du15z conf.d]# service nginx restartRedirecting to /bin/systemctl restart nginx.service
验证访问
[root@izbp152ke14timzud0du15z conf.d]# curl -w "%{http_code}\n" -o /dev/null https://172.16.5.9 -k % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 1004628100462800440250--:--:-- --:--:-- --:--:-- 44500200
