一台服务器如何配置多个 SSL 证书？

环境： LNMP vhost

状态：已经在服务器上面搭建了两个不同顶级域名的网站，其中一个已经使用了 SSL ，现在想让第二个网站也 https 访问。

按照这篇文章的方法

https://baohua.me/middleware/nginx/nginx-single-ip-address-to-configure-multiple-ssl-certificates/

现在是这样的

[root@CentOs ~]# /usr/local/nginx/sbin/nginx -V

nginx version: nginx/1.9.9

built by gcc 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC)

built with OpenSSL 1.0.1h 5 Jun 2014

TLS SNI support enabled

configure arguments: --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_gzip_static_module --with-ipv6 --with-openssl=../openssl-1.0.1h/

但是修改第二个网站的 conf 文件之后

conf 如下:

server

{

listen 80;

server_name xxx.domain.com;

return 301 https://xxx.domain.come$request_uri;

}

server

{

    listen 443 ssl;

    #listen [::]:80;

	ssl on;

    ssl_certificate /root/xxx.domain.com.crt;

    ssl_certificate_key /root/xxx.domain.com.key;  
 
    server_name xxx.domain.com;

    index index.html index.htm index.php default.html default.htm default.php;

    .....

然后重启 Nginx 报错

[root@CentOs ~]# service nginx restart

Stoping nginx... nginx: [emerg] SSL_CTX_use_PrivateKey_file("/root/xxx.domain.com.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch) failed. Use force-quit

Starting nginx... nginx (pid 29963 29962) already running.