English 中文(简体)
缩略语
原标题:NGINX SSL Timeout
  • 时间:2012-01-13 03:36:54
  •  标签:
  • ssl
  • nginx

正在继续停下来。

这里是我的NGI 书记:

worker_processes  4;
error_log /var/log/nginx/error.log;
pid /var/run/nginx.pid;

events {
    worker_connections 1024;
    use epoll;
}

http {
    proxy_next_upstream error;
    charset utf-8;
    include mime.types;
    default_type application/octet-stream;
    access_log /var/log/nginx/access.log;
    keepalive_timeout 65;
    keepalive_requests 0;
    proxy_read_timeout 200;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    gzip on;
    gzip_min_length 1000;
    gzip_proxied any;
    gzip_types text/plain text/css text/xml
               application/x-javascript application/xml
               application/atom+xml text/javascript;
    server{
            ### WEB Address ###
        server_name mydomain.com;


            ### SSL log files ###
            access_log /var/log/nginx/ssl-access.log;
    error_log /var/log/nginx/ssl-error.log;
    listen 443;

            ### SSL Certificates ###
    ssl on;
    ssl_certificate /etc/nginx/unified.crt;
    ssl_certificate_key /etc/nginx/ssl.key;
    keepalive_timeout    60;

            ### PROXY TO TORNADO ###
            location / {
        proxy_pass_header Server;
            proxy_set_header Host $http_host;
            proxy_redirect off;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_pass http://127.0.0.1:8889;
        }
  }
}

SSL接入记录和误差记录为空白。

I ve tried restarting NGINX a couple of times. As a side note commenting out SSL and setting listen to 80 works for non-SSL connections.

任何帮助都是巨大的。

问题回答

或许有443个港口在服务器上关闭? http://www.yougetsignal.com/tools/open-ports/“rel=“noreferer” http://www.yougetsignal.com/tools/open-ports/。

我同意Klen的回答,我还要补充一点。

首先,去并检查一下贵国第443号港口在

如果关闭,就去找你 a子,选择你的话题,去做描述——并大体;安全团体——和;发射

“entergraph

Then click on edit -> Add Rule

选择HTTPS,从备选办法中挑选,你们应当看到这一点。

enter image description here

有几个东西可以检查。

#1:如果在您的用户中允许使用https?

sudo ufw allow https && sudo ufw enable

#2: 开放港口<代码>443

第一,检查该指挥部正在听取443号港口的意见:

lsof -iTCP -sTCP:LISTEN -P

I saw nginx which was correct Then i checked whether the 443 is opened by the tool mentioned by klen (http://www.yougetsignal.com/tools/open-ports/) Port 443 was closed so I had to run

iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT

D. 开放港口 443





相关问题
ssl on login form?

I have SSL on my website....when the user logs in from a http page the form action is sent to https page, would this still secure the posted data? Or would it be better to have the form and the page ...

SSL slowness in EC2

We ve deployed our rails app to EC2. In our setup, we have two proxies on small instances behind round-robin DNS. These run nginx load balancers for a dynamically growing and shrinking farm of web ...

Why can t I find the truststore for an SSL handshake?

I m using the Spring RESTTemplate on the client side to make calls to a REST endpoint. The client in this case is a Spring app and Tomcat is the servlet container. I m running into issues making a ...

To add more parameter for my http header for SSL/TLS

As far as I understand, https is http plus SSL/TLS. What do I need to do if I want to add 3 more parameters for the header? I found a file inside Mozilla s NSS - ssl3ext.c, but I don t understand it ...

Why am I getting handshake_failure with Java SSL cert?

I m trying to use Hudson (which uses SVNKit) to access a Subversion repository that requires a client certificate to access it. I can access the same repository using the same client certificate via ...

热门标签