标签:oca socket usr aes blog nec rem pem response
ailed: Error during WebSocket handshake: Unexpected response code: 404
ssl_certificate /usr/local/nginx/cert/2075610_beihaoyuewen.com.pem; ssl_certificate_key /usr/local/nginx/cert/2075610_beihaoyuewen.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL; ssl_prefer_server_ciphers on; location /wss/ { proxy_pass http://127.0.0.1:8011/; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header X-real-ip $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; } location / { proxy_pass http://www.beihaoyuewen.com; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header X-real-ip $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; } }
ws 也要求用ssl,前端页面需要改成wss;
//判断当前浏览器是否支持WebSocket if (‘WebSocket‘ in window) { websocket = new WebSocket("${ws}://${websocketPath}websocket/"+timestamp); } else { alert(‘当前浏览器 Not support websocket‘); }
正确配置,双域名:只验证了lpwyx域名,剩下的应该也没问题:
ssl.conf
server { listen 443 ssl; server_name www.lpwyx.com; ssl_certificate /usr/local/nginx/cert/2720230_lpwyx.com.pem; ssl_certificate_key /usr/local/nginx/cert/2720230_lpwyx.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL; ssl_prefer_server_ciphers on; location / { proxy_pass http://www.lpwyx.com; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header X-real-ip $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; } } server { listen 443 ssl; server_name www.beihaoyuewen.com; ssl_certificate /usr/local/nginx/cert/2075610_beihaoyuewen.com.pem; ssl_certificate_key /usr/local/nginx/cert/2075610_beihaoyuewen.com.key; ssl_session_timeout 5m; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers AESGCM:ALL:!DH:!EXPORT:!RC4:+HIGH:!MEDIUM:!LOW:!aNULL:!eNULL; ssl_prefer_server_ciphers on; location / { proxy_pass http://www.beihaoyuewen.com; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header X-real-ip $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; } }
参考:
https://blog.csdn.net/qq_35808136/article/details/89677749
标签:oca socket usr aes blog nec rem pem response
原文地址:https://www.cnblogs.com/hoge66/p/11828291.html