配置 ssl 出现了问题： chrome 军哥，浏览器显示 www.mydomain.com 将您重定向的次数过多

fasefe

环境： lnmp,申请了免费的腾讯 ssl 证书
我的 nginx.conf 配置如下：

1. user www www;
   
2. 
   
3. worker_processes auto;
   
4. 
   
5. error_log /home/wwwlogs/nginx_error.log crit;
   
6. 
   
7. pid /usr/local/nginx/logs/nginx.pid;
   
8. 
   
9. #Specifies the value for maximum file descriptors that can be opened by this process. worker_rlimit_nofile 51200;
   
10. 
    
11. events { use epoll; worker_connections 51200; multi_accept on; }
    
12. 
    
13. http {
    
14. 
    
15.     map $http_cf_ipcountry $allow {
    
16.     default yes;
    
17.     CN yes;
    
18.     RU no;
    
19.     US yes;
    
20.     }
    
21.     include       mime.types;
    
22.     default_type  application/octet-stream;
    
23. 
    
24.     server_names_hash_bucket_size 128;
    
25.     client_header_buffer_size 32k;
    
26.     large_client_header_buffers 4 32k;
    
27.     client_max_body_size 50m;
    
28. 
    
29.     sendfile   on;
    
30.     tcp_nopush on;
    
31. 
    
32.     keepalive_timeout 60;
    
33. 
    
34.     tcp_nodelay on;
    
35. 
    
36.     fastcgi_connect_timeout 300;
    
37.     fastcgi_send_timeout 300;
    
38.     fastcgi_read_timeout 300;
    
39.     fastcgi_buffer_size 64k;
    
40.     fastcgi_buffers 4 64k;
    
41.     fastcgi_busy_buffers_size 128k;
    
42.     fastcgi_temp_file_write_size 256k;
    
43. 
    
44.     gzip on;
    
45.     gzip_min_length  1k;
    
46.     gzip_buffers     4 16k;
    
47.     gzip_http_version 1.1;
    
48.     gzip_comp_level 2;
    
49.     gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
    
50.     gzip_vary on;
    
51.     gzip_proxied   expired no-cache no-store private auth;
    
52.     gzip_disable   "MSIE [1-6]\.";
    
53. 
    
54.     #limit_conn_zone $binary_remote_addr zone=perip:10m;
    
55.     ##If enable limit_conn_zone,add "limit_conn perip 10;" to server section.
    
56. 
    
57.     server_tokens off;
    
58.     access_log off;
    
59. server {
    
60. 
    
61. listen       80;
    
62. 
    
63. server_name  www.mydomain.com;
    
64. 
    
65. # Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.
    
66. return 301 https://www.mydomain.com$request_uri;
    
67. }
    
68. 
    
69. server{
    
70. 
    
71.    if ($allow = no) {
    
72. return 403;
    
73.   }
    
74. 
    
75.    location ~ /.well-known {
    
76.     allow all;
    
77.     }
    
78. 
    
79.      listen 443 default ssl;
    
80.     #listen [::]:80 default_server ipv6only=on;
    
81.     server_name www.mydomain.com;
    
82.     ssl_certificate /usr/local/nginx/conf/1_www.mydomain.com_bundle.crt;
    
83.     ssl_certificate_key /usr/local/nginx/conf/2_www.mydomain.com.key;
    
84.     ssl_session_timeout 5m;
    
85.     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    
86.     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    
87.     ssl_prefer_server_ciphers on;
    
88.     index index.html index.htm index.php;
    
89.     root  /home/wwwroot/default;
    
90. 
    
91.     #error_page   404   /404.html;
    
92.     include enable-php.conf;
    
93. 
    
94.     location /nginx_status
    
95.     {
    
96.         stub_status on;
    
97.         access_log   off;
    
98.     }
    
99. 
    
100.     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
     
101.     {
     
102.         expires      30d;
     
103.     }
     
104. 
     
105.     location ~ .*\.(js|css)?$
     
106.     {
     
107.         expires      12h;
     
108.     }
     
109. 
     
110. 
     
111. 
     
112. 
     
113.     location ~ /\.
     
114.     {
     
115.         deny all;
     
116.     }
     
117. 
     
118. 
     
119.     access_log  /home/wwwlogs/access.log;
     
120. }
     
121. include vhost/*.conf; }

复制代码

参考了教程： https://www.v2ex.com/t/275074?hmsr=toutiao.io&utm_medium=toutiao.io&utm_source=toutiao.io
和 https://www.qcloud.com/document/product/400/4143#2.-nginx-.E8.AF.81.E4.B9.A6.E9.83.A8.E7.BD.B2
重启： lnmp nginx restart 出现警告：
toping nginx... nginx: [warn] conflicting server name "www.mydomain.com" on 0.0.0.0:80, ignored

[ 本帖最后由 fasefe 于 2017-4-7 18:59 编辑 ]

licess

该域名添加了多次

fasefe

怎么改呢军哥？ /usr/local/nginx/conf/nginx.conf  里面的这个配置是否正确？另外我发现了/home/Richel/lnmp1.3-full/conf/nginx.conf 还有一个nginx.conf，这个文件做什么用的？里面的配置是：

user  www www;

worker_processes auto;

error_log  /home/wwwlogs/nginx_error.log  crit;

pid        /usr/local/nginx/logs/nginx.pid;

#Specifies the value for maximum file descriptors that can be opened by this process.
worker_rlimit_nofile 51200;

events
    {
        use epoll;
        worker_connections 51200;
        multi_accept on;
    }

http
    {
         geoip_country /usr/share/GeoIP/GeoIP.dat;
         map $geoip_country_code $allowed_country {
         default no;
         FK yes;
         FM yes;
         EH yes;
         }
        include       mime.types;
        default_type  application/octet-stream;
client_header_buffer_size 32k;
        large_client_header_buffers 4 32k;
        client_max_body_size 50m;

        sendfile   on;
        tcp_nopush on;

        keepalive_timeout 60;

        tcp_nodelay on;

        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        fastcgi_buffer_size 64k;
        fastcgi_buffers 4 64k;
        fastcgi_busy_buffers_size 128k;
        fastcgi_temp_file_write_size 256k;

        gzip on;
        gzip_min_length  1k;
        gzip_buffers     4 16k;
        gzip_http_version 1.1;
        gzip_comp_level 2;
        gzip_types     text/plain application/javascript application/x-javascript text/javascript text/css application/xml application/xml+rss;
        gzip_vary on;
        gzip_proxied   expired no-cache no-store private auth;
        gzip_disable   "MSIE [1-6]\.";
server
    {
            if ($allowed_country = no) {
           return 403;
       }
          if ($http_cf_ipcountry = CN){
        return 403;
        }

        listen 80 default_server;
        #listen [::]:80 default_server ipv6only=on;
        server_name www.lnmp.org;
        index index.html index.htm index.php;
        root  /home/wwwroot/default;

        #error_page   404   /404.html;
        include enable-php.conf;

        location /nginx_status
        {
            stub_status on;
            access_log   off;
        }

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /home/wwwlogs/access.log;
    }
include vhost/*.conf;
}
   
问题可能出现在这里面吗？看到servername  www.lnmp.org ？？？
并且我在服务器上野找不到vhost文件夹，include里面也没有啊？一般情况下vhost会放在什么地方？

fasefe

输入了命令：lnmp vhost list :
Domain: www.mydomain.com has been deleted.
Website files will not be deleted for security reasons.
You need to manually delete the website files.

原因是否出现在这里？website files 在哪里？里面有配置2次域名的conf文件吗？

fasefe

军哥现在我重启lnmp nginx restart没有这个警告了conflicting server name "www.mydomain.com" on 0.0.0.0:80, ignored
但是依然是www.mydomain.com 将您重定向的次数过多。网站现在是无法打开的状态，输入服务器ip会自动跳转到https:www.mydomain.com

licess

有可能是程序上还有301的设置