nginx无法跳转到开启ssl的o2oa的首页

meijinmeng

按照如下文档开启ssl后，把域名单独解析到o2oa可以通过域名访问, 前面+nginx后  无法跳转到o2oa后端，首页显示空白

https://www.o2oa.net/cms/serverdeployment/262.html

https://www.o2oa.net/cms/serverdeployment/464.html

论坛管理员

报什么错

meijinmeng

Nginx配置：

server {
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header REMOTE-HOST $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    listen 443 ssl;
    server_name    oa.sit.yintaerp.com;
    ssl_certificate_key   /usr/local/openresty/nginx/conf/certs/oa.sit.yintaerp.com.key;
    ssl_certificate   /usr/local/openresty/nginx/conf/certs/oa.sit.yintaerp.com.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    location / {
        proxy_pass http://192.168.3.214:443;
    }
}


server {
          listen 80;
          server_name oa.sit.yintaerp.com;
           #将请求转成https
           rewrite ^/(.*)$ https://192.168.3.214:443/$1 permanent;
}

报错如下：

meijinmeng

网址为 https://oa.sit.yintaerp.com/ 的网页可能暂时无法连接，或者它已永久性地移动到了新网址。
ERR_INVALID_RESPONSE

meijinmeng

Nginx日志如下：

meijinmeng

{ "time": "27/Feb/2023:20:27:35 +0800", "remote_addr": "192.168.40.7", "request_uri": "/x_desktop/index.html", "upstream_addr": "192.168.3.214:443", "remote_user": "-", "body_bytes_sent": "0", "request_time": "0.005", "status": "304", "request": "GET /x_desktop/index.html HTTP/2.0", "request_method": "GET", "http_referrer": "-", "body_bytes_sent":"0", "http_x_forwarded_for": "192.168.40.7", "msec": "1677500855.477", "upstream_http_content_length": "-", "server_name": "oa.sit.yintaerp.com","http_user_agent": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" }
{ "time": "27/Feb/2023:20:27:35 +0800", "remote_addr": "192.168.40.7", "request_uri": "/x_desktop/res/config/config.json?v=7.3&lemsp5i0", "upstream_addr": "192.168.3.214:443", "remote_user": "-", "body_bytes_sent": "593", "request_time": "0.006", "status": "200", "request": "GET /x_desktop/res/config/config.json?v=7.3&lemsp5i0 HTTP/2.0", "request_method": "GET", "http_referrer": "https://oa.sit.yintaerp.com/x_desktop/index.html", "body_bytes_sent":"593", "http_x_forwarded_for": "192.168.40.7", "msec": "1677500855.536", "upstream_http_content_length": "593", "server_name": "oa.sit.yintaerp.com","http_user_agent": "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" }


首页一直空白，在转不出来

启蒙星

前端f12看看，哪个地址访问不了，o2服务不通过nginx能否正常访问，nginx解析了ssl，o2不要开启ssl了，端口也尽量不要用443，另外检查下o2的node文件配置proxyHost值为oa.sit.yintaerp.com，proxyPort值为443

wangyuheng

我的机器没有开启ssl，直接用ip访问o2oa可以成功，但是在另一台机器搭nginx跳转到oao2，访问nginx就一直转圈，加载不出来，所以我觉得楼主不是ssl的问题，是nginx本来就转发不过来，你把ssl去点试试，应该也不行

meijinmeng

启蒙星 发表于 2023-2-28 09:34
前端f12看看，哪个地址访问不了，o2服务不通过nginx能否正常访问，nginx解析了ssl，o2不要开启ssl了，端口 ...

"web": {
    "enable": true,
    "sslEnable": true,
    "port": 443,
    "proxyHost": "oa.sit.yintaerp.com",
    "proxyPort": 443,
    "weight": 100,
    "dirAllowed": false,
    "statEnable": false,
    "statExclusions": "*.gif,*.jpg,*.png,*.ico",
    "cacheControlMaxAge": 0,
    "persistentConnectionsEnable": true,
    "requestLogEnable": false,
    "requestLogFormat": "",
    "requestLogRetainDays": 7

meijinmeng

启蒙星 发表于 2023-2-28 09:34
前端f12看看，哪个地址访问不了，o2服务不通过nginx能否正常访问，nginx解析了ssl，o2不要开启ssl了，端口 ...

按照官方开启ssl的方法开启的443，想用nginx跳转过去