Erreur nginx : open socket

Support Debian
#1

Erreur au niveau du log :

2017/09/07 17:14:54 [alert] 1433#0: *400 open socket #27 left in connection 4
2017/09/07 17:14:54 [alert] 1433#0: *402 open socket #29 left in connection 6
2017/09/07 17:14:54 [alert] 1433#0: *399 open socket #26 left in connection 7
2017/09/07 17:14:54 [alert] 1433#0: *403 open socket #30 left in connection 9
2017/09/07 17:14:54 [alert] 1433#0: aborting

#2

quelle version de debian
quelle version de nginx
config de nginx
comment t’as installer nginx
quel mode reverse proxy ou standard

#3

Merci pour votre réponse,
pour info tout était opérationnel pendant plus de deux, et après, les liens utilisant des cles ssl ont tombé en panne les autres marchent jusqu’à maintenant

debian 8.7
nginx 1.6.2

config:
upstream site_school {
server 127.0.0.1:9001 weight=1 fail_timeout=0;
}

upstream site_school-im {
server 127.0.0.1:8001 weight=1 fail_timeout=0;
}

http redirects to https

#server {
#listen 80;
#server_name actaerp.com;

Strict Transport Security

#add_header Strict-Transport-Security max-age=2592000;
##rewrite ^/.*$ https://$host$request_uri? permanent;
#}
#Ajouter par e-acta : optimisation
##ssl_session_cache shared:SSL:10m;
##ssl_session_timeout 10m;

server {

server port and name

#listen 443;
listen 80;
server_name www.school.e-acta.com school.e-acta.com;
#rewrite ^/(.*)$ http://www.actaerp.com/$1 permanent;

access_log /var/log/nginx/site_school.access.log;
error_log /var/log/nginx/site_school.error.log;

Specifies the maximum accepted body size of a client request,

as indicated by the request header Content-Length.

client_max_body_size 200m;

add ssl specific settings

keepalive_timeout 60;
ssl off;
##ssl_certificate /etc/ssl/nginx/server.crt;
##ssl_certificate_key /etc/ssl/nginx/server.key;

limit ciphers

##ssl_ciphers HIGH:!ADH:!MD5;
##ssl_protocols SSLv3 TLSv1;
##ssl_prefer_server_ciphers on;

increase proxy buffer to handle some OpenERP web requests

proxy_buffers 16 64k;
proxy_buffer_size 128k;

#general proxy settings

force timeouts if the backend dies

proxy_connect_timeout 600s;
proxy_send_timeout 600s;
proxy_read_timeout 600s;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;

set headers

proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;

Let the OpenERP web service know that we’re using HTTPS, otherwise

it will generate URL using http:// and not https://

#proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Proto $scheme;

by default, do not forward anything

proxy_redirect off;
proxy_buffering off;

location / {
proxy_pass http://site_school;
}

location /longpolling {
proxy_pass http://site_school-im;
}

cache some static data in memory for 60mins.

under heavy load this should relieve stress on the OpenERP web interface a bit.

location /web/static/ {
proxy_cache_valid 200 60m;
proxy_buffering on;
expires 864000;
proxy_pass http://site_school;
}
}

#4

tu veux dire que tu n’as rien touché, tout fonctionnait, le certificat ssl a expiré et après t’as fais quoi pour que le serveur ne fonctionne plus ?

#5

le certificat ssl n’a pas expiré tu peux voir https://school.actaerp.com/
et j’ai rien touché même au niveau serveur

#6

http://www.school.e-acta.com la ca fonctionne sans le https,

ajoute

proxy_ssl_server_name      on;

dans les sections proxy pass

#7

Le lien qui ne Marche plus est https://school.actaerp.com et non pas http://www.school.e-acta.com

Le fichier de configuration : actaerp_school.txt (2,2 Ko)

#8

unknown directive “proxy_ssl_server_name” in /etc/nginx/sites-enabled/actaerp_school:74

#9

oui je me suis trompé j’ai oublié de te répondre

#10

J’ai ajouté la traçabilité des info au niveau du log et il m’a affiché :
[info] 8648#0: *4 client SSL certificate verify error: (10:certificate has expired) while reading client request headers, client: 41.249.107.81, server: school.actaerp.com, request: “GET / HTTP/1.1”, host: "school.actaerp.com"
2017/09/11 09:34:09 [info] 8648#0: *5 client closed connection while waiting for request, client: 41.249.107.81, server: 0.0.0.0:443
2017/09/11 09:34:09 [info] 8648#0: *6 client SSL certificate verify error: (10:certificate has expired) while reading client request headers, client: 41.249.107.81, server: school.actaerp.com, request: “GET /favicon.ico HTTP/1.1”, host: “school.actaerp.com”, referrer: “https://school.actaerp.com/”

cela veut dire que le certificat est expiré, et normalement j’ai donnée 1 an au certificat. donc fort probable n’est pas expiré

#11

c’est un auto signé ton certif ?