使用HTTPS和SSL的Rails 3无法正常工作(仅显示nginx的默认页面)

时间:2014-04-14 08:41:32

标签: ruby-on-rails ruby-on-rails-3 nginx web-deployment

使用nginx配置Rails 3以使用HTTPS和SSL无法正常工作。它显示了Nginx的默认页面(带有文本的页面 - >欢迎使用nginx!)

我在application.rb

中写了config.force_ssl = true

我的nginx的Config文件如下

# server {
    #listen   80; ## listen for ipv4; this line is default and implied
    #listen   [::]:80 default ipv6only=on; ## listen for ipv6

    # root /usr/share/nginx/www;
    # index index.html index.htm;

    # Make site accessible from http://localhost/
    # server_name localhost;

    # location / {
        # First attempt to serve request as file, then
        # as directory, then fall back to index.html
        # try_files $uri $uri/ /index.html;
        # Uncomment to enable naxsi on this location
        # include /etc/nginx/naxsi.rules
    # }

    # location /doc/ {
        # alias /usr/share/doc/;
        # autoindex on;
        # allow 127.0.0.1;
        # deny all;
    # }

    # Only for nginx-naxsi : process denied requests
    #location /RequestDenied {
        # For example, return an error code
        #return 418;
    #}

    #error_page 404 /404.html;

    # redirect server error pages to the static page /50x.html
    #
    #error_page 500 502 503 504 /50x.html;
    #location = /50x.html {
    #   root /usr/share/nginx/www;
    #}

    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    #location ~ \.php$ {
    #   fastcgi_split_path_info ^(.+\.php)(/.+)$;
    #   # NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
    #
    #   # With php5-cgi alone:
    #   fastcgi_pass 127.0.0.1:9000;
    #   # With php5-fpm:
    #   fastcgi_pass unix:/var/run/php5-fpm.sock;
    #   fastcgi_index index.php;
    #   include fastcgi_params;
    #}

    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #   deny all;
    #}
#}


# another virtual host using mix of IP-, name-, and port-based configuration
#
#server {
#   listen 8000;
#   listen somename:8080;
#   server_name somename alias another.alias;
#   root html;
#   index index.html index.htm;
#
#   location / {
#       try_files $uri $uri/ /index.html;
#   }
#}


# HTTPS server

server {
    listen 443;
    server_name localhost;

    root /usr/share/nginx/www;
    index index.html index.htm;

    ssl on;
    ssl_certificate /etc/nginx/ssl/server.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;

    ssl_session_timeout 5m;

    ssl_protocols SSLv3 TLSv1;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP;
    ssl_prefer_server_ciphers on;

    location / {
        try_files $uri $uri/ /index.html;
    }

    location /doc/ {
        alias /usr/share/doc/;
        autoindex on;
        allow 127.0.0.1;
        deny all;
    }
}

修改

我的网站在此更改之前工作正常(没有https)

我遵循的步骤是

  1. 在application.rb

  2. 中添加config.force_ssl = true
  3. sudo cp /etc/nginx/sites-available/default /etc/nginx/sites-available/example

  4. 如上所示更改了/etc/nginx/sites-enabled/example

  5. sudo ln -s /etc/nginx/sites-available/example /etc/nginx/sites-enabled/example

  6. sudo service nginx restart

1 个答案:

答案 0 :(得分:2)

这不是ssl的错。你没有正确设置nginx。

Nginx只是一个代理,您必须将请求传递给您的rails应用程序。

location / {
  proxy_set_header Host $host;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto https;
  proxy_redirect off;
  proxy_pass http://localhost:3000;
}