0

I have created a self signed SSL certificate , but I'm facing with this error in my NGINX error log when I try to access to the site via https :

2020/05/05 12:49:49 [crit] 6#6: *14 SSL_read() failed (SSL: error:14191044:SSL routines:tls1_enc:internal error) while waiting for request, client: 192.168.197.209, server: 0.0.0.0:443

This is my NGINX conf:

server {
    listen 443 ssl;
    server_name myserver.com;
    ssl_certificate /etc/nginx/certs/myserver.com.crt;
    ssl_certificate_key /etc/nginx/certs/myserver.com.key;
    index index.php index.html;
    error_log  /var/log/nginx/error.log;
    access_log /var/log/nginx/access.log;
    root /var/www/public;
    server_tokens off;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-XSS-Protection "1; mode=block" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header Referrer-Policy "no-referrer-when-downgrade" always;
#    add_header Content-Security-Policy "default-src 'self' http: https: data: $

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_hide_header X-Powered-By;
                fastcgi_pass app1:9000;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
    }
    location / {
        try_files $uri $uri/ /index.php?$query_string;
        gzip_static on;
    }
    gzip on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 6;
    gzip_types text/plain text/css text/xml application/json application/javascri$

}

I'm also using NGINX:ALPINE docker image . Any one can help ?

Update 1 : OS: Ubuntu 18.04 , latest docker version , latest NGINX version

  • Thanks for your answer , It seems the problem has been resolved , I think It was because of NGINX Config Cache , because when I changed the certificates , got a new error , and again revert everything back to the former certificates , the OpenSSL error gone away – AliMahdavi May 5 at 16:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.