<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>It would be helpful if you can share a copy of the HTTPS tcpdump on the serverside.<br><br>thanks,<br><br>-B<br><br><div>> To: nginx@nginx.org<br>> Subject: HTTP access not working from Chrome, only HTTPS<br>> From: nginx-forum@nginx.us<br>> Date: Sun, 12 Oct 2014 12:30:21 -0400<br>> <br>> Hi, people.<br>> <br>> I 'm trying to publish IBM Connections by NGINX allowing access using both<br>> HTTP and HTTPS . By HTTPS is working but when I try to access by HTTP I get<br>> this error in Google Chrome only:<br>> <br>> This XML file does not appear to have any style information associated with<br>> it. The document tree is shown below.<br>> <error xmlns="http://www.ibm.com/xmlns/prod/sn"><br>> <code>403</code><br>> <message><br>> You are not authorized to perform the requested action.<br>> </message><br>> <trace/><br>> </error><br>> <br>> In Firefox there is no error message , but the page does not load correctly<br>> . In Internet Explorer it opens normally. Internally it works in any<br>> browser. I believe I need some additional configuration in Nginx. My code<br>> is:<br>> <br>> upstream connections.domain.com {<br>> server 172.16.0.83:443 weight=100000; #LAN/Connections address<br>> server 172.16.0.83:80;<br>> }<br>> server {<br>> listen 172.17.0.14:80; #DMZ/NGINX<br>> address <br>> listen 172.17.0.14:443 default ssl; <br>> server_name connections.domain.com;<br>> ssl_session_cache shared:SSL:1m;<br>> ssl_session_timeout 10m;<br>> ssl_certificate /etc/nginx/ssl/connections.cer;<br>> ssl_certificate_key /etc/nginx/ssl/connections.pem;<br>> ssl_verify_client off;<br>> ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;<br>> ssl_ciphers RC4:HIGH:!aNULL:!MD5;<br>> ssl_prefer_server_ciphers on;<br>> location / {<br>> proxy_pass https://connections.domain.com;<br>> proxy_set_header X-Real-IP $remote_addr;<br>> proxy_next_upstream timeout;<br>> }<br>> }<br>> <br>> In the Nginx log file, I saw these messages when trying to access from<br>> Google Chrome:<br>> <br>> "POST /homepage/j_security_check HTTP/1.1" 403 161<br>> "http://connections.domain.com/homepage/login/" "Mozilla/5.0 (Windows NT<br>> 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124<br>> Safari/537.36" "-"<br>> <br>> SSL_do_handshake() failed (SSL: error:140770FC:SSL<br>> routines:SSL23_GET_SERVER_HELLO:unknown protocol) while SSL handshaking to<br>> upstream, client: 179.213.15.12, server: connections.domain.com, request:<br>> "GET /homepage HTTP/1.1", upstream: "https://172.16.0.83:80/homepage", host:<br>> "connections.domain.com"<br>> <br>> Any help will be appreciated. If you need aditional information, please ask.<br>> Thanks you in advance.<br>> <br>> Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253923,253923#msg-253923<br>> <br>> _______________________________________________<br>> nginx mailing list<br>> nginx@nginx.org<br>> http://mailman.nginx.org/mailman/listinfo/nginx<br></div> </div></body>
</html>