nginx : [warn] the “ssl“ directive is deprecated, use the “listen ... ssl“ directive instead 解决

问题描述

配置nginx 加载 证书，卸载SSL 启动时告警

nginx 报错 : [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead：

错误配置

server {
    listen       443 ssl;
           server_name   localhost;
             
              ssl                  on; 
              ssl_certificate      /usr/local/crt/server.crt;  #证书位置
              ssl_certificate_key  /usr/local/crt/server.key;  #私钥位置
              ssl_session_cache    shared:SSL:1m;
              ssl_session_timeout  5m;
              ssl_ciphers  HIGH:!aNULL:!MD5;
              ssl_prefer_server_ciphers  on;
}

---

解决方案：

nginx版本在1.15.x版本之后的，ssl on; 要去掉，listen 443; 改为 listen 443 ssl

调整后配置文件

server {
    listen       443 ssl;
           server_name   localhost;
      
           #   ssl                  on;  去除ssl on
              ssl_certificate      /usr/local/crt/server.crt;  #证书位置
              ssl_certificate_key  /usr/local/crt/server.key;  #私钥位置
              ssl_session_cache    shared:SSL:1m;
              ssl_session_timeout  5m;
              ssl_ciphers  HIGH:!aNULL:!MD5;
              ssl_prefer_server_ciphers  on;
}