自建证书: openssl genrsa -des3 -out ssl.key mv ssl.key ssl_bak.key openssl rsa -in ssl_bak.key -out ssl.key openssl req -new -key ssl.key -out ssl.csr openssl x509 -req -days 365 -in ssl.csr -signkey ssl.key -out ssl.crt 查看错误日志: tail -f error.log no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking 解决办法: vim xxx.conf listen 443 default;