无法验证第一个证书代理nginx

时间:2018-04-23 06:50:43

标签: ssl nginx nextjs

我配置nginx一起使用前端和后端相同的域

  

my-domain.com - >前端

     

my-domain.com/api/ - >后端。

运行HTTP时,它运行正常,但是我配置了https,它没有运行第一个请求。我不知道什么是错的。

前端我正在使用NextJs,SSR框架

  

我正在使用isomorphic-unfetch请求。

请帮帮我,谢谢。

upstream customer-ssr {
    server 127.0.0.1:3030;
    keepalive 64;
}

server {
    listen 80;
    server_name  my-domain.com www.my-domain.com;
    return 301 https://my-domain.com$request_uri;
}

server {
    listen 443 ssl http2;
    server_name www.my-domain.com;
    return 301 $scheme://my-domain.com$request_uri;
}

server {
    listen 443 ssl http2 default_server;
    listen [::]:443 ssl http2 default_server;

    server_name my-domain.com;

    root     /home/my-domain/my-domain-web/current;

    ssl_certificate /etc/nginx/ssl/my-domain.com.crt;
    ssl_certificate_key /etc/nginx/ssl/my-domain.com.key;
    ssl_protocols       TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers         HIGH:!aNULL:!MD5;
    add_header          Strict-Transport-Security "max-age=31536000; includeSubdomains";

    location / {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-NginX-Proxy true;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_max_temp_file_size 0;
        proxy_pass http://customer-ssr;
        proxy_redirect off;
        proxy_read_timeout 240s;
    }

    location /api/ {
       proxy_buffering       off;
       proxy_set_header      Host              $proxy_host;
       proxy_set_header      X-Real-IP         $remote_addr;
       proxy_set_header      X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header      X-Forwarded-Proto $scheme;
       proxy_pass            http://110.95.104.901:8888;
    }
}

1 个答案:

答案 0 :(得分:0)

在您的main(index / server).js文件上写这行:

/**
 * Handle UNABLE_TO_VERIFY_LEAF_SIGNATURE error
**/
process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";