Назад | Перейти на главную страницу

Веб-почта «Не удается установить безопасное соединение с сервером»

Я настраиваю сервер Ubuntu14 / NGinX, и почти все работает (phpmyadmin, ispconfig и т. Д.).

Я установил Dovecot / Postfix / Squirelmail, чтобы установить почтовый сервер. Я следовал руководству «the-perfect-server-ubuntu-14.04-nginx-bind-mysql-php-postfix-dovecot-and-ispconfig3» от HowToForge

Я могу подключиться через https к ISPConfig (порт 8080), но веб-почта (порт 8081) выдает ошибку SSL-соединения;

Unable to make a secure connection to the server. 
This may be a problem with the server, 
or it may be requiring a client authentication 
certificate that you don't have.


Error code: ERR_SSL_PROTOCOL_ERROR

Это первый раз, когда я (пытался) настроить почтовый сервер на Ubuntu / NGinx, я думаю, что он почти работает, но я не могу исправить последние шаги ..

ОБНОВИТЬ:

Ниже находится apps.vhost с сайтов с поддержкой

server {
    listen 8081;

    server_name _;

    root   /var/www/apps;

    client_max_body_size 20M;

    location / {
           index index.php index.html;
    }

    # serve static files directly
    location ~* ^.+.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt)$ {
           access_log        off;
    }

    location ~ \.php$ {
           try_files $uri =404;
           fastcgi_param   QUERY_STRING            $query_string;
           fastcgi_param   REQUEST_METHOD          $request_method;
           fastcgi_param   CONTENT_TYPE            $content_type;
           fastcgi_param   CONTENT_LENGTH          $content_length;

           fastcgi_param   SCRIPT_FILENAME         $request_filename;
           fastcgi_param   SCRIPT_NAME             $fastcgi_script_name;
           fastcgi_param   REQUEST_URI             $request_uri;
           fastcgi_param   DOCUMENT_URI            $document_uri;
           fastcgi_param   DOCUMENT_ROOT           $document_root;
           fastcgi_param   SERVER_PROTOCOL         $server_protocol;

           fastcgi_param   GATEWAY_INTERFACE       CGI/1.1;
           fastcgi_param   SERVER_SOFTWARE         nginx/$nginx_version;

           fastcgi_param   REMOTE_ADDR             $remote_addr;
           fastcgi_param   REMOTE_PORT             $remote_port;
           fastcgi_param   SERVER_ADDR             $server_addr;
           fastcgi_param   SERVER_PORT             $server_port;
           fastcgi_param   SERVER_NAME             $server_name;

           fastcgi_param   HTTPS                   $https;

           # PHP only, required if PHP was built with --enable-force-cgi-redirect
           fastcgi_param   REDIRECT_STATUS         200;
           fastcgi_pass unix:/var/lib/php5-fpm/apps.sock;
           fastcgi_index index.php;
           fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
           #fastcgi_param PATH_INFO $fastcgi_script_name;
           fastcgi_buffer_size 128k;
           fastcgi_buffers 256 4k;
           fastcgi_busy_buffers_size 256k;
           fastcgi_temp_file_write_size 256k;
    }

    location ~ /\. {
           deny  all;
    }

    location /phpmyadmin {
           root /usr/share/;
           index index.php index.html index.htm;
           location ~ ^/phpmyadmin/(.+\.php)$ {
                   try_files $uri =404;
                   root /usr/share/;
                   fastcgi_param   QUERY_STRING            $query_string;
                   fastcgi_param   REQUEST_METHOD          $request_method;
                   fastcgi_param   CONTENT_TYPE            $content_type;
                   fastcgi_param   CONTENT_LENGTH          $content_length;

                   fastcgi_param   SCRIPT_FILENAME         $request_filename;
                   fastcgi_param   SCRIPT_NAME             $fastcgi_script_name;
                   fastcgi_param   REQUEST_URI             $request_uri;
                   fastcgi_param   DOCUMENT_URI            $document_uri;
                   fastcgi_param   DOCUMENT_ROOT           $document_root;
                   fastcgi_param   SERVER_PROTOCOL         $server_protocol;

                   fastcgi_param   GATEWAY_INTERFACE       CGI/1.1;
                   fastcgi_param   SERVER_SOFTWARE         nginx/$nginx_version;

                   fastcgi_param   REMOTE_ADDR             $remote_addr;
                   fastcgi_param   REMOTE_PORT             $remote_port;
                   fastcgi_param   SERVER_ADDR             $server_addr;
                   fastcgi_param   SERVER_PORT             $server_port;
                   fastcgi_param   SERVER_NAME             $server_name;

                   fastcgi_param   HTTPS                   $https;

                   # PHP only, required if PHP was built with --enable-force-cgi-redirect
                   fastcgi_param   REDIRECT_STATUS         200;
                   # To access phpMyAdmin, the default user (like www-data on Debian/Ubuntu) must be used
                   #fastcgi_pass 127.0.0.1:9000;
                   fastcgi_pass unix:/var/run/php5-fpm.sock;
                   fastcgi_index index.php;
                   fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                   fastcgi_buffer_size 128k;
                   fastcgi_buffers 256 4k;
                   fastcgi_busy_buffers_size 256k;
                   fastcgi_temp_file_write_size 256k;
                   fastcgi_read_timeout 1200;
           }
           location ~* ^/phpmyadmin/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
                   root /usr/share/;
           }
    }
    location /phpMyAdmin {
           rewrite ^/* /phpmyadmin last;
    }

    location /squirrelmail {
           root /usr/share/;
           index index.php index.html index.htm;
           location ~ ^/squirrelmail/(.+\.php)$ {
                   try_files $uri =404;
                   root /usr/share/;
                   fastcgi_param   QUERY_STRING            $query_string;
                   fastcgi_param   REQUEST_METHOD          $request_method;
                   fastcgi_param   CONTENT_TYPE            $content_type;
                   fastcgi_param   CONTENT_LENGTH          $content_length;

                   fastcgi_param   SCRIPT_FILENAME         $request_filename;
                   fastcgi_param   SCRIPT_NAME             $fastcgi_script_name;
                   fastcgi_param   REQUEST_URI             $request_uri;
                   fastcgi_param   DOCUMENT_URI            $document_uri;
                   fastcgi_param   DOCUMENT_ROOT           $document_root;
                   fastcgi_param   SERVER_PROTOCOL         $server_protocol;

                   fastcgi_param   GATEWAY_INTERFACE       CGI/1.1;
                   fastcgi_param   SERVER_SOFTWARE         nginx/$nginx_version;

                   fastcgi_param   REMOTE_ADDR             $remote_addr;
                   fastcgi_param   REMOTE_PORT             $remote_port;
                   fastcgi_param   SERVER_ADDR             $server_addr;
                   fastcgi_param   SERVER_PORT             $server_port;
                   fastcgi_param   SERVER_NAME             $server_name;

                   fastcgi_param   HTTPS                   $https;

                   # PHP only, required if PHP was built with --enable-force-cgi-redirect
                   fastcgi_param   REDIRECT_STATUS         200;
                   # To access SquirrelMail, the default user (like www-data on Debian/Ubuntu) must be used
                   #fastcgi_pass 127.0.0.1:9000;
                   fastcgi_pass unix:/var/run/php5-fpm.sock;
                   fastcgi_index index.php;
                   fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                   fastcgi_buffer_size 128k;
                   fastcgi_buffers 256 4k;
                   fastcgi_busy_buffers_size 256k;
                   fastcgi_temp_file_write_size 256k;
           }
           location ~* ^/squirrelmail/(.+\.(jpg|jpeg|gif|css|png|js|ico|html|xml|txt))$ {
                   root /usr/share/;
           }
    }
    location /webmail {
           rewrite ^/* /squirrelmail last;
    }

    location /cgi-bin/mailman {
           root /usr/lib/;
           fastcgi_split_path_info (^/cgi-bin/mailman/[^/]*)(.*)$;
           fastcgi_param   QUERY_STRING            $query_string;
           fastcgi_param   REQUEST_METHOD          $request_method;
           fastcgi_param   CONTENT_TYPE            $content_type;
           fastcgi_param   CONTENT_LENGTH          $content_length;

           fastcgi_param   SCRIPT_FILENAME         $request_filename;
           fastcgi_param   SCRIPT_NAME             $fastcgi_script_name;
           fastcgi_param   REQUEST_URI             $request_uri;
           fastcgi_param   DOCUMENT_URI            $document_uri;
           fastcgi_param   DOCUMENT_ROOT           $document_root;
           fastcgi_param   SERVER_PROTOCOL         $server_protocol;

           fastcgi_param   GATEWAY_INTERFACE       CGI/1.1;
           fastcgi_param   SERVER_SOFTWARE         nginx/$nginx_version;

           fastcgi_param   REMOTE_ADDR             $remote_addr;
           fastcgi_param   REMOTE_PORT             $remote_port;
           fastcgi_param   SERVER_ADDR             $server_addr;
           fastcgi_param   SERVER_PORT             $server_port;
           fastcgi_param   SERVER_NAME             $server_name;

           fastcgi_param   HTTPS                   $https;

           # PHP only, required if PHP was built with --enable-force-cgi-redirect
           fastcgi_param   REDIRECT_STATUS         200;
           fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
           fastcgi_param PATH_INFO $fastcgi_path_info;
           fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
           fastcgi_intercept_errors on;
           fastcgi_pass unix:/var/run/fcgiwrap.socket;
    }

    location /images/mailman {
           alias /usr/share/images/mailman;
    }

    location /pipermail {
           alias /var/lib/mailman/archives/public;
           autoindex on;
    }
}

ОБНОВЛЕНИЕ 2:

Я не могу комментировать, так как у меня еще нет 50 репутации, и я не могу ответить на свой вопрос, поэтому пока я не знаю, как обрабатывать комментарии и ответы.

Вы не настроили этот порт как ssl, поэтому ваш браузер возвращает ошибку.

В Nginx вы можете включить протокол ssl для порта, добавив ssl к строке прослушивания.

server {
        listen 8081 ssl;
...
       }

Вы также можете использовать ssl on в вашей конфигурации, но предпочтительнее описанный выше метод.

Вам также необходимо будет полностью указать свой ключ SSL и информацию о сертификате.

server {
    listen              443 ssl;
    server_name         www.example.com;
    ssl_certificate     www.example.com.crt;
    ssl_certificate_key www.example.com.key;
    ssl_protocols       SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    ...
}

Подробнее см. Настройка HTTPS-серверов в Nginx.