Question

我正在使用nuxt.js进行服务器端渲染。我必须在我的nuxt应用程序上应用HTTPS，所以我应用了Certbot生成的SSL证书。但是，我的Nuxt应用程序生成一个错误，如下所示。

 ERROR  write EPROTO 140118450071360:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:252:

我的服务器是AWS EC2。我正在使用Ubuntu 16.04，Nginx和Express。我试图更改我的Nginx代理策略，但这不起作用。

以下是我运行服务器的代码。


/**
 * Module dependencies.
 */

var app = require('../app');
var debug = require('debug')('server:server');
var http = require('http');
var fs = require('fs');
var https = require('https');
var tls = require("tls");
var db = require('../models');

/**
 * Get port from environment and store in Express.
 */

tls.DEFAULT_ECDH_CURVE = "auto";
const serverAddress = require('../config').serverAddress
const port = 3000

if (serverAddress === '') {
    console.log("deploy enter #####");

    // Certificate
    const privateKey = fs.readFileSync("", "utf8");
    const certificate = fs.readFileSync("", "utf8");
    const ca = fs.readFileSync("", "utf8");

    const credentials = {
        key: privateKey,
        cert: certificate
    };

    /**
     * Create HTTPS server.
     */

    https.createServer(credentials, app).listen(port, function() {
        db.sequelize
            .authenticate().then(() => {
                console.log('Connection has been established successfully.');
                db.sequelize.sync();

            }).catch((err) => {
                console.error('Unable to connect to the database:', err);
            })
    });

} else {
    console.log("local enter #####");

    /**
     * Listen on provided port, on all network interfaces.
     */
    var http = require('http')
    var server = http.createServer(app);

    app.set('port', port);

    server.listen(port);
    server.on('error', onError);
    server.on('listening', onListening);
}

/**
 * Normalize a port into a number, string, or false.
 */

function normalizePort(val) {
  var port = parseInt(val, 10);

  if (isNaN(port)) {
    // named pipe
    return val;
  }

  if (port >= 0) {
    // port number
    return port;
  }

  return false;
}

/**
 * Event listener for HTTP server "error" event.
 */

function onError(error) {
  if (error.syscall !== 'listen') {
    throw error;
  }

  var bind = typeof port === 'string'
    ? 'Pipe ' + port
    : 'Port ' + port;

  // handle specific listen errors with friendly messages
  switch (error.code) {
    case 'EACCES':
      console.error(bind + ' requires elevated privileges');
      process.exit(1);
      break;
    case 'EADDRINUSE':
      console.error(bind + ' is already in use');
      process.exit(1);
      break;
    default:
      throw error;
  }
}

/**
 * Event listener for HTTP server "listening" event.
 */

function onListening() {
  var addr = server.address();
  var bind = typeof addr === 'string'
    ? 'pipe ' + addr
    : 'port ' + addr.port;
  debug('Listening on ' + bind);
}

，以下是我的Nginx配置。

server {
        # Note: You should disable gzip for SSL traffic.
        # See: https://bugs.debian.org/773332
        #
        # Read up on ssl_ciphers to ensure a secure configuration.
        # See: https://bugs.debian.org/765782
        #
        # Self signed certs generated by the ssl-cert package
        # Don't use them in a production server!
        #
        # include snippets/snakeoil.conf;

        # Add index.php to the list if you are using PHP
        index index.html index.htm index.nginx-debian.html;
        server_name mysterico.com; # managed by Certbot


        location / {
                # First attempt to serve request as file, then
                # as directory, then fall back to displaying a 404.
                try_files $uri $uri/ =404;
                proxy_pass http://127.0.0.1:8080;
        }

    listen [::]:443 ssl http2 ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    gzip off;
    ssl_certificate /etc/letsencrypt/live/.../fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/.../privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}

server {
    if ($host = mysterico.com) {
        return 301 https://$host$request_uri;
    }

    listen 80;
    listen [::]:80;
    server_name mysterico.com;
    return 404;
}

Answer 1

错误 |--------- |/ | | /-| O | /|| | | / | |__________ 有时是由 Nuxt 在没有有效证书（或使用自签名证书）的情况下通过 https 执行其服务器端呈现引起的。

如果您使用 nuxt-axios 来执行 API 请求，您可以告诉 axios 在浏览器中运行时使用 ssl3_get_record:wrong version number，如果它在浏览器中运行时使用 https服务器。

在您的 http 中添加：

nuxt.config.js

然后您可以在 publicRuntimeConfig: { axios: { // this is the url used on the server: baseURL: "http://localhost:8080/api/v1", // this is the url used in the browser: browserBaseURL: "https://localhost:8443/api/v1", }, }, 或 .vue 文件中使用 axios，如下所示：

.js

如何修复NuxtJS中的SSL错误版本号错误？

1 个答案: