nginx 配置 https 时找不到 pem 证书问题

问题：

在使用nginx docker 时的挂载卷 为 -v /root/ssl/letsencrypt/live/xxxxxxx:/etc/nginx/cert 然后再nginx 的default.conf 中的证书位置为/etc/nginx/cert/fullchain.pem 就会提示找不到证书文件 No such file or directory:fopen('/etc/nginx/cert/fullchain.pem','r')

具体提示如下

cannot load certificate "/etc/nginx/cert/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/nginx/cert/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: [emerg] cannot load certificate "/etc/nginx/cert/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/nginx/cert/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)

 原因：

由于在/root/ssl/letsencrypt/live/xxxxx 中的 fullchain.pem, privkey.pem 等的文件为软链 并且指向 ../../archive/xxxx/fullchain.pem 等， 所以在挂载之后直接取 live/xxxx/fullchain.pem 同等于取/etc/nginx/cert/fullchain.pem 的 ../../archive/xxxx/fullchain.pem 文件，所以取不到文件提示 No such file or directory（个人理解，如果有误欢迎批评指正）

 

 

 解决方案：

将docker 的挂载卷 设置为 -v /root/ssl/letsencrypt:/etc/nginx/cert 然后nginx 的default.conf 中的证书位置为 /etc/nginx/cert/live/xxxx/fullchain.pem 即可，这样即使取 ../../archive/xxxx/fullchain.pem 也可以取到