HTTP access not working from Chrome, only HTTPS
daniel.leandro
nginx-forum at nginx.us
Sun Oct 12 16:30:21 UTC 2014
Hi, people.
I 'm trying to publish IBM Connections by NGINX allowing access using both
HTTP and HTTPS . By HTTPS is working but when I try to access by HTTP I get
this error in Google Chrome only:
This XML file does not appear to have any style information associated with
it. The document tree is shown below.
<error xmlns="http://www.ibm.com/xmlns/prod/sn">
<code>403</code>
<message>
You are not authorized to perform the requested action.
</message>
<trace/>
</error>
In Firefox there is no error message , but the page does not load correctly
. In Internet Explorer it opens normally. Internally it works in any
browser. I believe I need some additional configuration in Nginx. My code
is:
upstream connections.domain.com {
server 172.16.0.83:443 weight=100000; #LAN/Connections address
server 172.16.0.83:80;
}
server {
listen 172.17.0.14:80; #DMZ/NGINX
address
listen 172.17.0.14:443 default ssl;
server_name connections.domain.com;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 10m;
ssl_certificate /etc/nginx/ssl/connections.cer;
ssl_certificate_key /etc/nginx/ssl/connections.pem;
ssl_verify_client off;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers RC4:HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
proxy_pass https://connections.domain.com;
proxy_set_header X-Real-IP $remote_addr;
proxy_next_upstream timeout;
}
}
In the Nginx log file, I saw these messages when trying to access from
Google Chrome:
"POST /homepage/j_security_check HTTP/1.1" 403 161
"http://connections.domain.com/homepage/login/" "Mozilla/5.0 (Windows NT
6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124
Safari/537.36" "-"
SSL_do_handshake() failed (SSL: error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol) while SSL handshaking to
upstream, client: 179.213.15.12, server: connections.domain.com, request:
"GET /homepage HTTP/1.1", upstream: "https://172.16.0.83:80/homepage", host:
"connections.domain.com"
Any help will be appreciated. If you need aditional information, please ask.
Thanks you in advance.
Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253923,253923#msg-253923
More information about the nginx
mailing list