Nginx Service Startup Fails and a Message Is Displayed Indicating that the SSL Configuration Is Missing

Symptom

The Nginx service fails to be started and an error is reported stating "Check fail: ssl_xxx is not configured (required item)", as shown in the following figure. In the error message, ssl_xxx indicates the SSL configuration item name.

Troubleshooting Procedure

The following security configuration items are checked for Nginx startup. If any configuration items do not meet the requirement, an error is reported.

The security configuration information for the Nginx configuration file is as follows:
----------------------------------------------------------------------------
ssl_certificate "/opt/DevKit/rsa/server.crt";
ssl_certificate_key "/opt/DevKit/rsa/pontus";
ssl_ecdh_curve X25519:X448;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout  5m;
ssl_session_tickets off;
ssl_protocols TLSv1.3 TLSv1.2;
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256";
ssl_prefer_server_ciphers  on;
ssl_stapling on;
ssl_stapling_verify on;
----------------------------------------------------------------------------

/opt indicates the DevKit installation directory. Replace it with the actual directory.
Ensure that the values of configuration items ssl_ecdh_curve, ssl_protocols, ssl_ciphers, ssl_prefer_server_ciphers, ssl_stapling, and ssl_stapling_verify are the same as the corresponding values. For other configuration items, you only need to confirm that they have been configured. No forcible verification is required for the configuration values.

Modify the corresponding configuration items in the /opt/DevKit/tools/nginx/conf/devkit_nginx.conf configuration file based on the error information. After the modification is complete, restart the Nginx service.

Parent topic: FAQs