在配置 https,出现 https 访问 PHP 文件 403forbidden, http 访问站点正常

站点环境:centos7+php+mysql+openresty ( nginx )
 
用的是腾讯云的一年免费证书,配置好后,目前网站用 https://www.mydomain.com/50x.html ,https://www.mydomain.com/info.php 测试都可以正常显示 https,但是访问首页和其他 webpage 页面却都是 403forbidden。http 访问全部网页显示正常。为什么出现这种情况?请问同学们如何解决?
cosole 里面的错误提示:fail to load resource
 
error.log :

2018/07/11 07:55:22 [emerg] 5550#5550: bind() to [::]:80 failed (98: Address already in use)

2018/07/11 07:55:22 [emerg] 5550#5550: bind() to 0.0.0.0:443 failed (98: Address already in use)

 
贴出自己的 nginx.conf:
 
 
user root;

worker_processes 1;

#error_log logs/error.log;

error_log logs/error.log debug;

#error_log logs/error.log info;

pid logs/nginx.pid;

#error_log /var/log/nginx/error.log debug;

#pid /var/run/nginx/nginx.pid;

events {

worker_connections 1024;
}

http {

include mime.types;
default_type application/octet-stream;

#log_format main '$remote_addr - $remote_user [$time_local] "$request" '
# '$status $body_bytes_sent "$http_referer" '
# '"$http_user_agent" "$http_x_forwarded_for"';

#access_log logs/access.log main;

sendfile on;
#tcp_nopush on;

#keepalive_timeout 0;
keepalive_timeout 65;

client_max_body_size 8m; #允许客户端请求的最大单文件字节数
client_body_buffer_size 2m; #缓冲区代理缓冲用户端请求的最大字节

fastcgi_buffers 8 16k;
fastcgi_buffer_size 32k;
fastcgi_connect_timeout 300;
fastcgi_send_timeout 300;
fastcgi_read_timeout 300;

gzip on;

#WAF
lua_shared_dict limit 50m;
lua_shared_dict guard_dict 100m;
lua_shared_dict dict_captcha 70m;
lua_package_path "/usr/local/openresty/nginx/conf/waf/?.lua";
init_by_lua_file "/usr/local/openresty/nginx/conf/waf/init.lua";
access_by_lua_file "/usr/local/openresty/nginx/conf/waf/access.lua";

server {
listen 80;
listen [::]:80 ipv6only=on default_server;

server_name my.server.ip.here;

#charset koi8-r;

#access_log logs/host.access.log main;

location / {
root html;
index index.php index.html index.htm;
}

#error_page 404 /404.html;

# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}

# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}

# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#

location ~ \.php$ {

fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}

# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
}


# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
# listen 8000;
# listen somename:8080;
# server_name somename alias another.alias;

# location / {
# root html;
# index index.html index.htm;
# }
#}


# HTTPS server

server {
listen 443 ssl http2;

server_name www.mydomainname.com;
charset utf-8;
ssl on;
default_type text/plain;

ssl_certificate 1_www.mydomainname.com_bundle.crt;
ssl_certificate_key 2_www.mydomainname.com.key;


ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;

location / {
root html;
index index.html index.htm index.php;
}


location ~ /phpmyadmin/.+\.php$ {
if ($fastcgi_script_name ~ /phpmyadmin/(.+\.php.*)$) {
set $valid_fastcgi_script_name $1;
}
include fastcgi_params;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /usr/share/phpMyAdmin/$valid_fastcgi_script_name;
}

location ~ \.php$ {
# 设置监听端口
fastcgi_pass 127.0.0.1:9000;
# 设置 nginx 的默认首页文件(上面已经设置过了,可以删除)
fastcgi_index index.php;
# 设置脚本文件请求的路径
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
# 引入 fastcgi 的配置文件
include fastcgi_params;
}



}
}
已邀请:

seosns - 需要二开朋友,在cike.xiaoer.org.cn提交任务,我接单

赞同来自:

设置你的服务器就好了!比如宝塔

要回复问题请先登录注册