与远程服务器进行 SSL 握手期间的 Apache 错误答案

【问题标题】：Apache Error during SSL Handshake with remote server与远程服务器进行 SSL 握手期间的 Apache 错误
【发布时间】：2020-11-02 00:44:57
【问题描述】：

我有 apache 在 443 上监听，web 应用 nodejs 在 EC2 linux 服务器上的 6969 上监听。

我有 ssl.conf 文件

 <VirtualHost _default_:443>
    SSLEngine On
    SSLProxyEngine On
    ProxyRequests Off
    ProxyPreserveHost On
    SSLProxyVerify none
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off
    SSLProxyCheckPeerExpire off

    ServerAdmin ***@gmail.com
    DocumentRoot /var/www/html/***
    ServerName ***
    SSLCertificateFile "***/certificate.crt"
    SSLCertificateChainFile "***/ca_bundle.crt"
    SSLCertificateKeyFile "***/private.key"


    ProxyPass /  https://127.0.0.1:6969/
    ProxyPassReverse / https://127.0.0.1:6969/


      <Directory "/var/www/html/***">
         Order deny,allow
         Allow from all
         AllowOverride All
         Require all granted
      </Directory>
   </VirtualHost>

和文件 httpd/error_log

[Sun Jul 12 18:56:27.176297 2020] [proxy:error] [pid 32374:tid 140253401167616] (20014)Internal error (specific information not available): [client 117.6.62.***:32539] AH01084: pass request body failed to 127.0.0.1:6969 (127.0.0.1)
[Sun Jul 12 18:56:27.176334 2020] [proxy:error] [pid 32374:tid 140253401167616] [client 117.6.62.***:32539] AH00898: Error during SSL Handshake with remote server returned by /
[Sun Jul 12 18:56:27.176339 2020] [proxy_http:error] [pid 32374:tid 140253401167616] [client 117.6.62.***:32539] AH01097: pass request body failed to 127.0.0.1:6969 (127.0.0.1) from 117.6.62.*** ()
[Sun Jul 12 18:56:34.161784 2020] [proxy:error] [pid 32374:tid 140253401167616] (20014)Internal error (specific information not available): [client 117.6.62.***:32542] AH01084: pass request body failed to 127.0.0.1:6969 (127.0.0.1)
[Sun Jul 12 18:56:34.161831 2020] [proxy:error] [pid 32374:tid 140253401167616] [client 117.6.62.***:32542] AH00898: Error during SSL Handshake with remote server returned by /
[Sun Jul 12 18:56:34.161836 2020] [proxy_http:error] [pid 32374:tid 140253401167616] [client 117.6.62.***:32542] AH01097: pass request body failed to 127.0.0.1:6969 (127.0.0.1) from 117.6.62.*** ()
[Sun Jul 12 18:56:47.451390 2020] [mpm_event:notice] [pid 32156:tid 140253690120384] AH00492: caught SIGWINCH, shutting down gracefully
[Sun Jul 12 18:56:48.524967 2020] [suexec:notice] [pid 32494:tid 140512587598016] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Sun Jul 12 18:56:48.549325 2020] [lbmethod_heartbeat:notice] [pid 32494:tid 140512587598016] AH02282: No slotmem from mod_heartmonitor
[Sun Jul 12 18:56:48.552155 2020] [mpm_event:notice] [pid 32494:tid 140512587598016] AH00489: Apache/2.4.43 () OpenSSL/1.0.2k-fips configured -- resuming normal operations
[Sun Jul 12 18:56:48.552179 2020] [core:notice] [pid 32494:tid 140512587598016] AH00094: Command line: '/usr/sbin/httpd -D FOREGROUND'

谁能建议我做错了什么？

【问题讨论】：

您的 NodeJS 应用程序是通过 HTTPS 提供流量还是只是普通的 HTTP？默认情况下，它将是 HTTP。您可以尝试通过curl https://localhost:6969 连接来验证这一点
@ChrisWilliams 非常感谢，我通过在 virtualhost ssl conf 中将 https 替换为 http 解决了这个问题。
添加了答案:)

标签： amazon-web-services apache ssl amazon-ec2 proxy

【解决方案1】：

这是尝试使用 HTTPS 与内部节点应用程序通信的结果。

应用程序在 HTTPS 上运行，更新到 HTTP 在内部解决了这个问题。

【讨论】：