DPSearch — 安装新的 SSL 证书后,NGINX 服务无法启动。
Summary: DPSearch:安装新的安全套接字层 (SSL) 证书后,NGINX 服务无法启动,并显示密码错误。
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
安装新的SSL证书后,NGINX服务无法启动,并产生如下错误消息:
Feb 08 06:45:07 hostname systemd[1]: Starting LSB: nginx... Feb 08 06:45:07 hostname nginx[6873]: Starting nginx Enter PEM pass phrase: Feb 08 06:45:07 hostname nginx[6873]: nginx: [emerg] cannot load certificate key "/usr/local/search/etc/cert/server.key": PEM_read_bio_PrivateKey() failed (SSL: error:0906406D:PEM routines:PEM_def_callback:problems getting password error:0907B068:PEM routines:PEM_READ_BIO_PRIVATEKEY:bad password read) Feb 08 06:45:07 hostname startproc[6879]: startproc: exit status of parent of /usr/local/nginx/sbin/nginx: 1 Feb 08 06:45:07 hostname nginx[6873]: ..failed Feb 08 06:45:07 hostname systemd[1]: nginx.service: Control process exited, code=exited status=7 Feb 08 06:45:07 hostname systemd[1]: Failed to start LSB: nginx. Feb 08 06:45:07 hostname systemd[1]: nginx.service: Unit entered failed state. Feb 08 06:45:07 hostname systemd[1]: nginx.service: Failed with result 'exit-code'.
Cause
私钥有密码要求,但 NGINX 未配置为使用密码。
Resolution
以下步骤在没有密码要求的情况下创建私钥文件:
- 将现有server.key文件名重命名为 server_pass.key。
mv server.key server_pass.key
- 在没有密码要求的情况下创建新密钥。假定 RSA 密钥正在使用中,否则请相应地调整命令。出现提示时,键入密码,然后按 Enter 键。
openssl rsa -in server_pass.key -out server.key
- 停止和启动 NGINX 服务,并检查是否没有显示错误消息:
service nginx stop service nginx start service nginx status
- 转到搜索主页。检查是否显示了正确的 SSL 证书信息。
Affected Products
Data Protection Search, Data Protection SearchArticle Properties
Article Number: 000208401
Article Type: Solution
Last Modified: 22 Aug 2025
Version: 3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.