SSL_do_handshake() failed (SSL: error:0A00006C:SSL routines::bad key share) while SSL handshaking

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
www.iskillihikayeler.net
I ran this command:
letsencrypt
It produced this output:
This error in the log.
My web server is (include version):
nginx/1.22.1
The operating system my web server runs on is (include version):
CentOS Stream release 9
My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):
yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
certbot 2.6.0

All I did was run letsencrypt and deploy the certificate.

Do you trigger this error? According to this SO answer it may be triggered by faulty clients.

2 Likes

I tried with both Firefox and Safari.

What versions and on what systems?

I can connect to your system but get an HTTP 500 error. SSL Labs also gets 500 error but the overall grade for your server is an A (link here)

Your root name and the www have DNS pointing to two different servers. Is that intended?

nslookup iskillihikayeler.net
Address: 49.12.230.235

nslookup www.iskillihikayeler.net
Address: 157.90.145.203

I did this test. Does it also show a handshake failure at this timestamp?

curl -Ik https://www.iskillihikayeler.net/LEforumTest1234
HTTP/1.1 500 500 Service unavailable (with message)
Server: nginx/1.22.1
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/7.4.33
Cache-Control: no-cache, private
Date: Mon, 07 Aug 2023 19:01:33 GMT
4 Likes

It is and it's not intended. See, I'm trying to move the website to another server but I forgot to change the root. I thought the issue was because of that, I changed the root IP but turns out no.

Firefox 115.0.3 and Safari 16.2 on macOs Ventura 13.1

I'm also getting this one.

I still see different results:

curl -Ii iskillihikayeler.net
HTTP/1.1 500 Internal Server Error
Server: nginx/1.22.1
Date: Mon, 07 Aug 2023 19:32:04 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
X-Powered-By: PHP/7.4.33
curl -Ii www.iskillihikayeler.net
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.1
Date: Mon, 07 Aug 2023 19:32:21 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.iskillihikayeler.net/

Maybe we should have a look at the entire nginx configuration:
nignx -T

3 Likes

I was seeing same result for root and www. But, maybe something changed as now 200 OK and not 500 error. Two different nginx systems still

curl -I iskillihikayeler.net
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Mon, 07 Aug 2023 19:37:01 GMT
Content-Type: text/html
Content-Length: 4057
Last-Modified: Tue, 21 Dec 2021 19:41:19 GMT
Connection: keep-alive
ETag: "61c22ddf-fd9"
Accept-Ranges: bytes

curl -I www.iskillihikayeler.net
HTTP/1.1 301 Moved Permanently
Server: nginx/1.22.1
Date: Mon, 07 Aug 2023 19:37:04 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.iskillihikayeler.net/

3 Likes

@MikeMcQ, what IP do you show for iskillihikayeler.net?

1 Like
# configuration file /etc/nginx/conf.d/iskillihikayeler.net.conf:
server {
  server_name www.iskillihikayeler.net;
  root /home/iskillihikayeler.net/public_html/drupal/web;
  error_log /var/log/nginx/iskillihikayeler.net-error.log;
  access_log /var/log/nginx/iskillihikayeler.net-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }


    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/www.iskillihikayeler.net/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/www.iskillihikayeler.net/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = www.iskillihikayeler.net) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


  server_name www.iskillihikayeler.net;
    listen 80;
    return 404; # managed by Certbot


}

Still same as

3 Likes

@MikeMcQ
Multiple IPs = Multiple versions of nginx

@kartagis, there should be a lot more output for that.

3 Likes

I get:

Name:    iskillihikayeler.net
Address: 157.90.145.203

Name:    www.iskillihikayeler.net
Address: 157.90.145.203
3 Likes

Maybe this though :slight_smile:

nginx -T
2 Likes

unboundtest.com sees it like you so I guess my resolver is still waiting ...

3 Likes
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# configuration file /etc/nginx/nginx.conf:
# For more information on configuration, see:
#   * Official English Documentation: http://nginx.org/en/docs/
#   * Official Russian Documentation: http://nginx.org/ru/docs/

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/doc/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    keepalive_timeout   65;
    types_hash_max_size 4096;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;

    server {
        listen       80;
        listen       [::]:80;
        server_name  _;
        root         /usr/share/nginx/html;

        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;

        error_page 404 /404.html;
        location = /404.html {
        }

        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
        }
    }

# Settings for a TLS enabled server.
#
#    server {
#        listen       443 ssl http2;
#        listen       [::]:443 ssl http2;
#        server_name  _;
#        root         /usr/share/nginx/html;
#
#        ssl_certificate "/etc/pki/nginx/server.crt";
#        ssl_certificate_key "/etc/pki/nginx/private/server.key";
#        ssl_session_cache shared:SSL:1m;
#        ssl_session_timeout  10m;
#        ssl_ciphers PROFILE=SYSTEM;
#        ssl_prefer_server_ciphers on;
#
#        # Load configuration files for the default server block.
#        include /etc/nginx/default.d/*.conf;
#
#        error_page 404 /404.html;
#        location = /404.html {
#        }
#
#        error_page 500 502 503 504 /50x.html;
#        location = /50x.html {
#        }
#    }

}


# configuration file /etc/nginx/mime.types:

types {
    text/html                                        html htm shtml;
    text/css                                         css;
    text/xml                                         xml;
    image/gif                                        gif;
    image/jpeg                                       jpeg jpg;
    application/javascript                           js;
    application/atom+xml                             atom;
    application/rss+xml                              rss;

    text/mathml                                      mml;
    text/plain                                       txt;
    text/vnd.sun.j2me.app-descriptor                 jad;
    text/vnd.wap.wml                                 wml;
    text/x-component                                 htc;

    image/avif                                       avif;
    image/png                                        png;
    image/svg+xml                                    svg svgz;
    image/tiff                                       tif tiff;
    image/vnd.wap.wbmp                               wbmp;
    image/webp                                       webp;
    image/x-icon                                     ico;
    image/x-jng                                      jng;
    image/x-ms-bmp                                   bmp;

    font/woff                                        woff;
    font/woff2                                       woff2;

    application/java-archive                         jar war ear;
    application/json                                 json;
    application/mac-binhex40                         hqx;
    application/msword                               doc;
    application/pdf                                  pdf;
    application/postscript                           ps eps ai;
    application/rtf                                  rtf;
    application/vnd.apple.mpegurl                    m3u8;
    application/vnd.google-earth.kml+xml             kml;
    application/vnd.google-earth.kmz                 kmz;
    application/vnd.ms-excel                         xls;
    application/vnd.ms-fontobject                    eot;
    application/vnd.ms-powerpoint                    ppt;
    application/vnd.oasis.opendocument.graphics      odg;
    application/vnd.oasis.opendocument.presentation  odp;
    application/vnd.oasis.opendocument.spreadsheet   ods;
    application/vnd.oasis.opendocument.text          odt;
    application/vnd.openxmlformats-officedocument.presentationml.presentation
                                                     pptx;
    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
                                                     xlsx;
    application/vnd.openxmlformats-officedocument.wordprocessingml.document
                                                     docx;
    application/vnd.wap.wmlc                         wmlc;
    application/wasm                                 wasm;
    application/x-7z-compressed                      7z;
    application/x-cocoa                              cco;
    application/x-java-archive-diff                  jardiff;
    application/x-java-jnlp-file                     jnlp;
    application/x-makeself                           run;
    application/x-perl                               pl pm;
    application/x-pilot                              prc pdb;
    application/x-rar-compressed                     rar;
    application/x-redhat-package-manager             rpm;
    application/x-sea                                sea;
    application/x-shockwave-flash                    swf;
    application/x-stuffit                            sit;
    application/x-tcl                                tcl tk;
    application/x-x509-ca-cert                       der pem crt;
    application/x-xpinstall                          xpi;
    application/xhtml+xml                            xhtml;
    application/xspf+xml                             xspf;
    application/zip                                  zip;

    application/octet-stream                         bin exe dll;
    application/octet-stream                         deb;
    application/octet-stream                         dmg;
    application/octet-stream                         iso img;
    application/octet-stream                         msi msp msm;

    audio/midi                                       mid midi kar;
    audio/mpeg                                       mp3;
    audio/ogg                                        ogg;
    audio/x-m4a                                      m4a;
    audio/x-realaudio                                ra;

    video/3gpp                                       3gpp 3gp;
    video/mp2t                                       ts;
    video/mp4                                        mp4;
    video/mpeg                                       mpeg mpg;
    video/quicktime                                  mov;
    video/webm                                       webm;
    video/x-flv                                      flv;
    video/x-m4v                                      m4v;
    video/x-mng                                      mng;
    video/x-ms-asf                                   asx asf;
    video/x-ms-wmv                                   wmv;
    video/x-msvideo                                  avi;
}

# configuration file /etc/nginx/conf.d/boradental.com.tr.conf:
server {
  server_name www.boradental.com.tr;
  root /home/boradental.com.tr/public_html;
  error_log /var/log/nginx/boradental.com.tr-error.log;
  access_log /var/log/nginx/boradental.com.tr-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }


}

# configuration file /etc/nginx/fastcgi_params:

fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;

fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  REQUEST_SCHEME     $scheme;
fastcgi_param  HTTPS              $https if_not_empty;

fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;

fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;

# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;

# configuration file /etc/nginx/conf.d/egazete.aydinlik.com.tr.conf:
server {
  server_name egazete.aydinlik.com.tr;
  root /home/egazete.aydinlik.com.tr/public_html/drupal/web;
  error_log /var/log/nginx/egazete.aydinlik.com.tr-error.log;
  access_log /var/log/nginx/egazete.aydinlik.com.tr-access.log;
  location / {
		index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }
}

# configuration file /etc/nginx/conf.d/egret.webcinizim.com.conf:
server {
  server_name egret.webcinizim.com;
  root /home/egret.webcinizim.com/public_html/egret/web;
  error_log /var/log/nginx/egret.webcinizim.com-error.log;
  access_log /var/log/nginx/egret.webcinizim.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/html.webcinizim.com.conf:
server {
  server_name html.webcinizim.com;
  root /home/iegg/public_html;
  error_log /var/log/nginx/html.webcinizim.com-error.log;
  access_log /var/log/nginx/html.webcinizim.com-access.log;
  location / {
    index index.html;
    #try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/ilknurakgul.com.conf:
server {
  server_name www.ilknurakgul.com;
  root /home/ilknurakgul.com/public_html/drupal/web;
  error_log /var/log/nginx/ilknurakgul.com-error.log;
  access_log /var/log/nginx/ilknurakgul.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }
}

# configuration file /etc/nginx/conf.d/iskillihikayeler.net.conf:
server {
  server_name www.iskillihikayeler.net;
  root /home/iskillihikayeler.net/public_html/drupal/web;
  error_log /var/log/nginx/iskillihikayeler.net-error.log;
  access_log /var/log/nginx/iskillihikayeler.net-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }


    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/www.iskillihikayeler.net/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/www.iskillihikayeler.net/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
server {
    if ($host = www.iskillihikayeler.net) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


  server_name www.iskillihikayeler.net;
    listen 80;
    return 404; # managed by Certbot


}

# configuration file /etc/letsencrypt/options-ssl-nginx.conf:
# This file contains important security parameters. If you modify this file
# manually, Certbot will be unable to automatically provide future security
# updates. Instead, Certbot will print and log an error message with a path to
# the up-to-date file that you will need to refer to when manually updating
# this file. Contents are based on https://ssl-config.mozilla.org

ssl_session_cache shared:le_nginx_SSL:10m;
ssl_session_timeout 1440m;
ssl_session_tickets off;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off;

ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";

# configuration file /etc/nginx/conf.d/makromebutik.com.conf:
server {
  server_name www.makromebutik.com;
  root /home/makromebutik.com/public_html/drupal/web;
  error_log /var/log/nginx/makromebutik.com-error.log;
  access_log /var/log/nginx/makromebutik.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/pfa.webcinizim.com.conf:
server {
  server_name pfa.webcinizim.com;
  root /usr/share/postfixadmin/public;
  error_log /var/log/nginx/pfa.webcinizim.com-error.log;
  access_log /var/log/nginx/pfa.webcinizim.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/php-fpm.conf:
# PHP-FPM FastCGI server
# network or unix domain socket configuration

upstream php-fpm {
        server unix:/run/php-fpm/www.sock;
}

# configuration file /etc/nginx/conf.d/spiritofmineart.com.conf:
server {
  server_name som.webcinizim.com;
  root /home/spiritofmineart.com/public_html/drupal/web;
  error_log /var/log/nginx/spiritofmineart.com-error.log;
  access_log /var/log/nginx/spiritofmineart.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/tatipetkuafor.com.conf:
server {
  server_name www.tatipetkuafor.com;
  root /home/tatipetkuafor.com/public_html;
  error_log /var/log/nginx/tatipetkuafor.com-error.log;
  access_log /var/log/nginx/tatipetkuafor.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }
}

# configuration file /etc/nginx/conf.d/webcinizim.com.conf:
server {
  server_name www.webcinizim.com;
  root /home/webcinizim.com/public_html/web;
  error_log /var/log/nginx/webcinizim.com-error.log;
  access_log /var/log/nginx/webcinizim.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }

}

# configuration file /etc/nginx/conf.d/webmail.webcinizim.com.conf:
server {
  server_name webmail.webcinizim.com;
  root /usr/share/horde;
  error_log /var/log/nginx/webmail.webcinizim.com-error.log;
  access_log /var/log/nginx/webmail.webcinizim.com-access.log;
  location / {
    index index.php;
    try_files $uri /index.php?$query_string;
  }
  location ~ \.php$ {
		try_files $uri =404;
		fastcgi_buffers 256 16k;
		fastcgi_buffer_size 128k;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass_header Set-Cookie;
		fastcgi_pass_header Cookie;
		fastcgi_index index.php;
		include fastcgi_params;
		fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_pass unix:/run/php-fpm/www.sock;
  }
}

# configuration file /etc/nginx/default.d/php.conf:
# pass the PHP scripts to FastCGI server
#
# See conf.d/php-fpm.conf for socket configuration
#
index index.php index.html index.htm;

location ~ \.php$ {
    try_files $uri =404;
    fastcgi_intercept_errors on;
    fastcgi_index  index.php;
    include        fastcgi_params;
    fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_pass   php-fpm;
}

This is the whole nginx.conf and servers.

I have some questions:

Q#1: Do you want to serve the site "iskillihikayeler.net"?

The configuration file "/etc/nginx/conf.d/iskillihikayeler.net.conf" only serves the site "www.iskillihikayeler.net".

Q#2: What URL triggers the error message in the topic title?

Q#3: What shows "certbot certificates"?

3 Likes

No, I want to server https://www.iskillihikayeler.net

https://www.iskillihikayeler.net does.

Found the following certs:
Certificate Name: www.iskillihikayeler.net
Serial Number: somelongsobfuscatedstring
Key Type: ECDSA
Domains: www.iskillihikayeler.net
Expiry Date: 2023-11-04 10:43:13+00:00 (VALID: 88 days)
Certificate Path: /etc/letsencrypt/live/www.iskillihikayeler.net/fullchain.pem
Private Key Path: /etc/letsencrypt/live/www.iskillihikayeler.net/privkey.pem

It seems like something has gone wrong with the fastcgi.
As a test, I would try disabling that.

2 Likes

I checked another domain in that nginx config and it works fine with HTTPS www.makromebutik.com

But, this domain has a different IP than for www.iskillihikaleyer.net

Further, your domains www.boradental.com.tr and html.webcinizim.com have the same DNS IP as makromebutik. Although, they don't have port 443 (HTTPS) configured so could not test that.

Are you sure this nginx config is properly handling requests for the IP you have for www.iskillihikaleyer.net ?

4 Likes

My bet is that this is failing:

2 Likes