spectre wrote:Salut,

pour suivre le tuto suivant tu dois avoir un domaine
Donc tu dois prendre un domaine
chez 1&1 le domaine en .fr est à 0.99HT/an la première année

Donc pas cher

server {
    listen 80;
    listen 443 ssl;
    server_name domaine

    charset utf-8;
    index index.html index.php;
    client_max_body_size 10M;

    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;

    access_log /var/log/nginx/rutorrent-access.log combined;
    error_log /var/log/nginx/rutorrent-error.log error;
    
    error_page 500 502 503 504 /50x.html;
    location = /50x.html { root /usr/share/nginx/html; }

    auth_basic "seedbox";
    auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd";
    
    location = /favicon.ico {
        access_log off;
        log_not_found off;
    }

    location ^~ / {
        root /var/www/rutorrent;
        include /etc/nginx/conf.d/php;
        include /etc/nginx/conf.d/cache;

        location ~ /\.svn {
            deny all;
        }

        location ~ /\.ht {
            deny all;
        }
    }

    location ^~ /conf/ {
        deny all;
    }

    location ^~ /share/ {
        deny all;
    }
	
    location /TonUSER {
        include scgi_params;
        scgi_pass 127.0.0.1:5001;
        auth_basic "seedbox";
        auth_basic_user_file "/etc/nginx/passwd/rutorrent_passwd_User";
    }
}

openssl rsa -in votre-domaine.fr.key.enc -out votre-domaine.fr.key

Hi,

Congratulations on your new StartSSL™ account! Things you should know before proceeding:

During enrollment a client certificate has been installed into your browser for authentication purpose. This certificate allows you to securely access your account in the future. Make sure to *backup* this certificate including the private key to an external media! Failing to do so may result in the loss of your account. See also https://www.startssl.com/?app=25#4 for more information about how to backup your client certificates.

Even though StartSSL™ provides certificates generally free of charge, revocations thereof may carry a handling fee. Take great care of your private keys, save and backup all files all the time!

Take a minute of your time and visit the Tool Box section of your control panel, which provides you with many tools and utilities. They might help you during the various tasks of validation, creation and installation of your certificates.

Thank you for choosing StartSSL™!

reaman wrote:Bonjour,

J'ai créé un certificat SSL comme le montre votre tutoriel qui est très bien fait "Merci pour celui-i" ,
mais j'ai pas compris l'étape ou après la création du fichier votre-nomde domaine.fr.key.enc
dans le répertoire /etc/nginx/keys/tmp, il est dit que pour déchiffrer la clé privée avec le mot de passe
utilisé pour la générer et donnée la ligne de commande ci-dessous, j'ai compris je remplace le nom de
domaine par le miens mais ou je place mon mot de passe dans cette ligne de code ?

openssl rsa -in votre-domaine.fr.key.enc -out votre-domaine.fr.key

Merci de votre aide !

 Restarting nginx: nginxnginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/nginx/keys/mondomaine.com.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)

server {
	listen 80 default_server;
	listen 443 default_server ssl;
	server_name _;

	index index.html index.php;
	charset utf-8;
	client_max_body_size 10M;

        ssl on;
        ssl_certificate /etc/nginx/keys/zarev.ovh.crt-unified;
        ssl_certificate_key /etc/nginx/keys/zarev.ovh.key;

ssl on;
ssl_certificate /etc/nginx/keys/monDomaine.com.crt-unified;
ssl_certificate_key /etc/nginx/keys/monDomaine.com.key;

ssl_certificate /etc/nginx/ssl/server.crt;
ssl_certificate_key /etc/nginx/ssl/server.key;

service nginx restart

ssl on;
ssl_certificate /etc/nginx/keys/monDomaine.com.crt-unified;
ssl_certificate_key /etc/nginx/keys/monDomaine.com.key;