• nginx 环境下http和https(ssl)共存的方法


    80 443喘口共存之前是没问题的,但这次突然发现了这样的问题,htpps可以访问,但http不能访问会反回400

    1xx.6x.x9.x8 - - [19/Jun/2017:16:04:28 +0800] "GET /beehive/wec.xml HTTP/1.1" 400 683 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
    

     之前的配置:

    #app调试
    upstream test-appsrv_pools {
            server 11.100.98.100:8040;
            check interval=3000 rise=2 fall=3 timeout=2000;
     }
    #
    server {
        listen 80;
        listen 443;
        server_name test.xxxx.com;
        ssl on;
        ssl_certificate /etc/cert/xxx673140913.pem;
        ssl_certificate_key /etc/cert/xxx78673140913.key;
        #ssl_session_cache shared:SSL:1m;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_protocols SSLv2 SSLv3 TLSv1;
        ssl_protocols TLSv1.2 TLSv1.1;
        #ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers on;
        location / {
            proxy_pass http://test-appsrv_pools;
            #proxy_set_header Host                  $host;
            #proxy_set_header X-Real-IP             $remote_addr;
            #proxy_set_header X-Forwarded-For       $proxy_add_x_forwarded_for;
        }
     }
    

     上面这种配置之前是没有问题的:

    #app调试
    upstream test-appsrv_pools {
            server 11.10.200.160:8040;
            check interval=3000 rise=2 fall=3 timeout=2000;
     }
    #
    server {
        listen 80;
        listen 443 ssl;
        server_name test.xxxx.com;
        #ssl on;
        ssl_certificate /etc/cert/xx3978673140913.pem;
        ssl_certificate_key /etc/cert/xxx3978673140913.key;
        #ssl_session_cache shared:SSL:1m;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_protocols SSLv2 SSLv3 TLSv1;
        ssl_protocols TLSv1.2 TLSv1.1;
        #ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers on;
        location / {
            proxy_pass http://test-appsrv_pools;
            #proxy_set_header Host                  $host;
            #proxy_set_header X-Real-IP             $remote_addr;
            #proxy_set_header X-Forwarded-For       $proxy_add_x_forwarded_for;
        }
     }
    

     把ssl on;注掉,再把 443 后面加上ssl;

    如上面的配置 ,问题解决

  • 相关阅读:
    线段树 HDU 4217 Data Structure? 单点更新 区间查询
    线段树详解(转)这个博客很棒~
    hdu 1075 What Are You Talking About trie字典树
    hdu 1247 Hat’s Words trie 简单字典树
    hdu Just a Hook 线段树——成段操作 区域覆盖
    FLOYD
    做有效沟通的管理者
    幸福的四重境界
    5个馒头与100单生意
    成功和财富源于想法
  • 原文地址:https://www.cnblogs.com/bass6/p/7049610.html
Copyright © 2020-2023  润新知