eustasy / Bubbly

BASH: Better SSL in Nginx in 10 minutes. Configuration files and setup scripts for Certbot.
MIT License
218 stars 21 forks source link

Error on step 8 with Nginx 1.4.6 #9

Closed broderix closed 8 years ago

broderix commented 8 years ago
nginx: [emerg] invalid parameter "http2" in /etc/nginx/sites-enabled/nginx.conf:25
nginx: configuration file /etc/nginx/nginx.conf test failed

I do not support http2, so I disabled it

server {
        #listen 443 ssl http2;
        #listen [::]:443 ssl http2;
        listen 443 ssl;
        listen [::]:443 ssl;
...

Then I got error

nginx: [emerg] unknown directive "ssl_session_tickets" in /etc/nginx/sites-enabled/nginx.conf:51

I also disabled them. Then got

# nginx -t
nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/%MYSITE%/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/%MYSITE%/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed
# nginx -v
nginx version: nginx/1.4.6 (Ubuntu)
# uname -a
Linux ubuntu-512mb-ams2-01-arendude 3.13.0-79-generic #123-Ubuntu SMP Fri Feb 19 14:27:58 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
lewisgoddard commented 8 years ago

Run ls /etc/letsencrypt/live/ to see what certificates are available, it might not be where you think.

Second, your Nginx version is horrifically out of date. HTTP/2 is now in stable, as are SSL Tickets since January 2014! Running sudo apt-add-repository ppa:nginx/stable should allow you to upgrade to a more recent version.