nginx emerg SSL_CTX_load_verify_locations答案

【问题标题】：nginx emerg SSL_CTX_load_verify_locationsnginx emerg SSL_CTX_load_verify_locations
【发布时间】：2018-04-25 13:15:33
【问题描述】：

我的 /etc/nginx/sites-enabled/default 文件：

server {
    root /var/www/html;

    index index.html index.htm index.nginx-debian.html;

    server_name omp.kolebor.ru;

    location = / {
        try_files $uri $uri/ =404;
    }

    location /  {
        try_files $uri /test/$uri /test/index.html;
    }

    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/omp.kolebor.ru/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/omp.kolebor.ru/privkey.pem;
    ssl_client_certificate /etc/letsencrypt/live/omp.kolebor.ru/ca2.crt;
    ssl_verify_client on;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}

server {
    if ($host = omp.kolebor.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80 default_server;
    listen [::]:80 default_server;

    server_name omp.kolebor.ru;
    return 404; # managed by Certbot
}

当我执行"nginx -t" 时出现错误：

nginx：[emerg] SSL_CTX_load_verify_locations("/etc/letsencrypt/live/omp.kolebor.ru/ca2.crt") 失败 (SSL:)

我检查了几次路径的正确性，都是正确的。

我不明白为什么括号中没有错误（SSL：？？？）

也许证书ca2.crt 不正确？

【问题讨论】：

标签： nginx

【解决方案1】：

我尝试从命令创建新 crt：

openssl req -new -newkey rsa:1024 -nodes -keyout ca.key -x509 -days 500 -subj /C=RU/ST=Moscow/L=Moscow/O=company/OU=User/CN=etc /emailAddress=support@site.com -out ca.crt

它与此证书一起使用。

【讨论】：