[BUG] 站点开启SSL浏览器可访问，curl 失败 #5273
-
联系方式1Panel 版本v1.10.9-lts 问题描述
之前反馈历史
使用的自签证书 重现步骤无法重现，别人用我的证书 可以正常请求，我重建 OpenResty 依旧报错 期待的正确结果No response 相关日志输出No response 附加信息No response |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 6 replies
-
|
根据历史问题，WAF 全部关闭状态，就是不能 curl 正常请求，浏览器还是正常的。HTTP网站没有任何问题 |
Beta Was this translation helpful? Give feedback.
-
|
尝试将上述 IP 类型网站手动设置为默认站点。 |
Beta Was this translation helpful? Give feedback.
-
|
默认站点是其他站点 |
Beta Was this translation helpful? Give feedback.
-
|
改成默认站点虽然正常了，可是我不想默认站点是它，治标不治本呀 |
Beta Was this translation helpful? Give feedback.
-
编辑 /opt/1panel/apps/openresty/openresty/conf/conf.d/00.default.conf map "" $empty { listen 443 ssl http2; ssl_ciphers aNULL; |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
要重启 OpenResty 应用，不是面板，🤣 |
Beta Was this translation helpful? Give feedback.
-
|
你说改默认站点就正常了，因为你实际上是使用IP进行HTTPS握手，这个HTTPS握手不走Host标头，此时的握手信息的servername是空。 你只能改系统的hosts文件再直接用域名握手，这样就匹配正确的站点了。 这个讨论可以关了，这不是BUG。 |
Beta Was this translation helpful? Give feedback.
编辑 /opt/1panel/apps/openresty/openresty/conf/conf.d/00.default.conf
删除
map "" $empty {
default "";
}
listen 443 ssl http2;
ssl_ciphers aNULL;
ssl_certificate data:$empty;
ssl_certificate_key data:$empty;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;