Question

我在同一个nginx服务器上运行节点js应用程序rest api服务和wordpress。有一个android应用程序调用我的节点js服务从服务器获取数据。很多时候我的ssl handake失败或拒绝我的Android应用程序错误。在浏览我的服务器配置文件和日志文件时，我会在我的日志中获取此信息

SSL_do_handshake（）失败（SSL：错误：140A1175：SSL例程：SSL_BYTES_TO_CIPHER_LIST：不适当的回退），而SSL握手，客户端:::::

我的nginx.conf文件：

    user www-data;
    worker_processes 4;
    pid /run/nginx.pid;

    events {
    worker_connections 8096;
    multi_accept on;
    }

     worker_rlimit_nofile 40000;

    http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 45;
    types_hash_max_size 2048;
    # server_tokens off;

    # server_names_hash_bucket_size 64;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    # buffer optimizations
    client_body_buffer_size 10K;
    client_header_buffer_size 1k;
    client_max_body_size 8m;
    large_client_header_buffers 2 1k;

    access_log off;
    error_log /var/log/nginx/error.log;
    }

    server {

    listen 443 ssl;

    root /var/www/html;
    index index.php index.html index.htm;

    ssl_certificate /etc/nginx/ssl/crtfile.crt;
    ssl_certificate_key /etc/nginx/ssl/server.key;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            # try_files $uri $uri/ =404;
            # Uncomment to enable naxsi on this location
            # include /etc/nginx/naxsi.rules

            try_files $uri $uri/ /index.php?q=$uri&$args;
            #try_files $uri $uri/index.html;

    }

    location = /index.html {return 301 https://appyappy.com/;}

    # Only for nginx-naxsi used with nginx-naxsi-ui : process denied requests
    #location /RequestDenied {
    #       proxy_pass http://127.0.0.1:8080;
    #}

    error_page 404 /404.html;

    # redirect server error pages to the static page /50x.html
    #
    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
            root /usr/share/nginx/html;
    }
    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    location ~ \.php$ {
            try_files $uri =404;
            fastcgi_split_path_info ^(.+\.php)(/.+)$;
            fastcgi_pass unix:/var/run/php5-fpm.sock;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
    }

此外，如果用户在2k-5k左右没有太大，我也会在adroid应用程序中超时并且连接被拒绝错误。

SSL handake使nginx服务器失败

0 个答案: