Nginx is configured with https, which cannot be accessed from the public network.

centOS 7.4
nginx/1.12.2
https://www.lanten.me

Let"s Encrypt free certificate generated with acme.sh

after configuration, it is found that the external network cannot be accessed. After trying Telecom and Great Wall, https cannot be accessed, but mobile cellular network, China Mobile and China Unicom can all access https normally

.

nginx is configured as follows


    server {
        listen       80;
        server_name  www.lanten.me;
        return 301 https://$http_host$request_uri;
    }

    server {
        listen 443 ssl;
        server_name www.lanten.me;

        ssl on;
        ssl_certificate /etc/nginx/ssl/www.lanten.me.cer;
        ssl_certificate_key /etc/nginx/ssl/www.lanten.me.key;
        ssl_dhparam /etc/nginx/ssl/dhparam.pem;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:AES256+EECDH:AES256+EDH;
        ssl_prefer_server_ciphers on;

        root /home/www/;

        error_page 404 /index.html;
        error_page 500 502 503 504 /index.html;

    }

Port 443 has been confirmed to be open

clipboard.png

clipboard.png

I can"t solve it after messing around for two days. Ask for help

Mar.17,2021

solves the problem of replacing the certificate with https://dash.cloudflare.com/

Menu