It would be helpful if you can share a copy of the HTTPS tcpdump on the serverside.
thanks, -B > To: [email protected] > Subject: HTTP access not working from Chrome, only HTTPS > From: [email protected] > Date: Sun, 12 Oct 2014 12:30:21 -0400 > > Hi, people. > > I 'm trying to publish IBM Connections by NGINX allowing access using both > HTTP and HTTPS . By HTTPS is working but when I try to access by HTTP I get > this error in Google Chrome only: > > This XML file does not appear to have any style information associated with > it. The document tree is shown below. > <error xmlns="http://www.ibm.com/xmlns/prod/sn";> > <code>403</code> > <message> > You are not authorized to perform the requested action. > </message> > <trace/> > </error> > > In Firefox there is no error message , but the page does not load correctly > . In Internet Explorer it opens normally. Internally it works in any > browser. I believe I need some additional configuration in Nginx. My code > is: > > upstream connections.domain.com { > server 172.16.0.83:443 weight=100000; #LAN/Connections address > server 172.16.0.83:80; > } > server { > listen 172.17.0.14:80; #DMZ/NGINX > address > listen 172.17.0.14:443 default ssl; > server_name connections.domain.com; > ssl_session_cache shared:SSL:1m; > ssl_session_timeout 10m; > ssl_certificate /etc/nginx/ssl/connections.cer; > ssl_certificate_key /etc/nginx/ssl/connections.pem; > ssl_verify_client off; > ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; > ssl_ciphers RC4:HIGH:!aNULL:!MD5; > ssl_prefer_server_ciphers on; > location / { > proxy_pass https://connections.domain.com; > proxy_set_header X-Real-IP $remote_addr; > proxy_next_upstream timeout; > } > } > > In the Nginx log file, I saw these messages when trying to access from > Google Chrome: > > "POST /homepage/j_security_check HTTP/1.1" 403 161 > "http://connections.domain.com/homepage/login/"; "Mozilla/5.0 (Windows NT > 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2062.124 > Safari/537.36" "-" > > SSL_do_handshake() failed (SSL: error:140770FC:SSL > routines:SSL23_GET_SERVER_HELLO:unknown protocol) while SSL handshaking to > upstream, client: 179.213.15.12, server: connections.domain.com, request: > "GET /homepage HTTP/1.1", upstream: "https://172.16.0.83:80/homepage";, host: > "connections.domain.com" > > Any help will be appreciated. If you need aditional information, please ask. > Thanks you in advance. > > Posted at Nginx Forum: > http://forum.nginx.org/read.php?2,253923,253923#msg-253923 > > _______________________________________________ > nginx mailing list > [email protected] > http://mailman.nginx.org/mailman/listinfo/nginx
_______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
