使用此代码 www.bodeind.is 重定向到 https，但 bodeinds.is 警告:潜在的安全风险

Question

我为 www.bodeind.is 和 bodeind.is 安装了Let's Encrypt SSL，但是当我在Firefox中输入 bodeind.is 时，我收到警告：潜在的安全风险。关于如何在下面的代码中纠正此问题的任何建议？当我输入 www.bodeind.is 时，一切正常。当我在 www.bodeind.is 和 bodeind.is ssllabs.com 考试时，我得到了A评级。

I am running nginx on Ubuntu LTS 18.04
    #
    # Serve bodeind.is and www.bodeind.is
    #
    server {
            root /var/www/bodeind.is/html;
            index index.php index.html index.htm index.nginx-debian.html;
            server_name bodeind.is www.bodeind.is;
    # First attempt to serve request as file, then as directory, then fall back to displaying a 404.
            location / { 
                try_files $uri $uri/ /index.php?$args;
            }
            location ~ .php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/run/php/php7.0-fpm.sock;
            }
            location ~ /.ht {
                deny all;
            }
            location = /favicon.ico {
                log_not_found off;
                access_log off;
            }
            location = /robots.txt {
                log_not_found off;
                access_log off;
                allow all;
            }
            location ~* .(css|gif|ico|jpeg|jpg|js|png)$ {
                expires max;
                log_not_found off;
            }
        listen [::]:443 ssl ipv6only=on; # managed by Certbot
        listen 443 ssl; # managed by Certbot
        ssl_certificate /etc/letsencrypt/live/bodeind.is/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/bodeind.is/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    }
    server {
        if ($host = www.bodeind.is) {
            return 301 https://$host$request_uri;
        } # managed by Certbot
        if ($host = bodeind.is) {
            return 301 https://$host$request_uri;
        } # managed by Certbot
            listen 80 default_server;
            listen [::]:80 default_server;
            server_name bodeind.is www.bodeind.is;
        return 404; # managed by Certbot
    }

Answer 1

检查您的 TLS 证书适用于哪些域。您将需要：

• www.bodeind.is或*.bodeind.is，以及
• bodeind.is

请注意，*.bodeind.is 的证书与主机bodeind.is 不匹配。

此外，请确保您有一个证书。如果您正在请求两个不同的证书，但从同一 Web 服务器提供域，则一个证书可能会覆盖另一个证书。