A VPS has multiple files under sites-enabled directory.
One of these experiences failures after a certain amount of time. The logs are not very indicative to me, but these lines are representative of batches of errors:
2022/01/16 06:36:44 [crit] 738797#738797: *9702 SSL_do_handshake() failed (SSL: error:14201044:SSL routines:tls_choose_sigalg:internal error) while SSL handshaking, client: 17[obfusc], server: 0.0.0.0:443
2022/01/16 07:01:27 [crit] 738797#738797: *9716 SSL_do_handshake() failed (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) while SSL handshaking, client: 14[obfusc], server: 0.0.0.0:443
2022/01/16 17:42:52 [info] 1309633#1309633: Using 32768KiB of shared memory for nchan in /etc/nginx/nginx.conf:63
Overall, nginx -t only complains about one line as a duplicate, but for another domain and indicates it ignores that line.
The configuration of the affected application follows
server {
server_name third.second.ws;
root /home/deploy/examine/current/public;
passenger_enabled on;
passenger_app_env development;
location /cable {
passenger_app_group_name myapp_websocket;
passenger_force_max_concurrent_requests_per_process 0;
}
# Allow uploads up to 100MB in size
client_max_body_size 100m;
location ~ ^/(assets|packs) {
expires max;
gzip_static on;
}
listen 443 ssl http2;
# listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/third.second.ws/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/third.second.ws/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = third.second.ws) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name third.second.ws;
listen 80;
return 404; # managed by Certbot
}
What in the above could explain the failures of this configuration file?
