Curl 通过vagrant到精简的SSL连接_Curl_Ssl_Vagrant_Thin

Curl 通过vagrant到精简的SSL连接

curl ssl vagrant

Curl 通过vagrant到精简的SSL连接,curl,ssl,vagrant,thin,Curl,Ssl,Vagrant,Thin,我正在运行一个Rails应用程序，它强制SSL，并在一个流浪的VM中使用HTTP基本身份验证。如果我尝试从主机向应用程序发出curl请求，我会得到 curl -k --verbose https://[user]:[password]@localhost:3001/ * About to connect() to localhost port 3001 (#0) * Trying ::1... * Connection refused * Trying fe80::1... * Conn

我正在运行一个Rails应用程序，它强制SSL，并在一个流浪的VM中使用HTTP基本身份验证。如果我尝试从主机向应用程序发出curl请求，我会得到

curl -k --verbose https://[user]:[password]@localhost:3001/
* About to connect() to localhost port 3001 (#0)
*   Trying ::1...
* Connection refused
*   Trying fe80::1...
* Connection refused
*   Trying 127.0.0.1...
* connected
* Connected to localhost (127.0.0.1) port 3001 (#0)
* SSLv3, TLS handshake, Client hello (1):
* Unknown SSL protocol error in connection to localhost:3001 
* Closing connection #0
curl: (35) Unknown SSL protocol error in connection to localhost:3001

如果我从虚拟机内部发出相同的curl请求，它就会工作

curl -k --verbose https://[user]:[password]@localhost:3001/
* About to connect() to localhost port 3001 (#0)
*  Trying 127.0.0.1...
* Connected to localhost (127.0.0.1) port 3001 (#0)
* successfully set certificate verify locations:
*  CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using AES256-SHA
* Server certificate:
* subject: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd
* start date: 2013-10-15 19:38:54 GMT
* expire date: 2023-10-13 19:38:54 GMT
* issuer: C=AU; ST=Some-State; O=Internet Widgits Pty Ltd
* SSL certificate verify result: self signed certificate (18), continuing anyway.
* Server auth using Basic with user 'admin'
> GET / HTTP/1.1
> Authorization: Basic [stuff]
> User-Agent: curl/7.29.0
> Host: localhost:3001
> Accept: */*
> 
< HTTP/1.1 200 OK
< Strict-Transport-Security: max-age=31536000
< X-Frame-Options: SAMEORIGIN
< X-XSS-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< X-UA-Compatible: chrome=1
< Content-Type: application/json; charset=utf-8
< ETag: "80961ae530b068989bbd4463b2fb6308"
< Cache-Control: max-age=0, private, must-revalidate
< Set-Cookie: request_method=GET; path=/; secure
< X-Request-Id: 9d0426ec-eca2-469a-9e36-14c79d69596a
< X-Runtime: 0.894703
< Connection: close
< Server: thin 1.5.1 codename Straight Razor
< 
* Closing connection 0
* SSLv3, TLS alert, Client hello (1):
[page]

我看到问题是“不知名的SSL协议错误”，但我在网上发现的任何东西都没有帮助。从输出可以看出，它们都使用SSLv3。钥匙没有过期。我什么都没有，请帮助。

文件中的端口转发设置不正确。我连接到postgresql而不是Thin，因此出现了连接但SSL错误。复制粘贴错误。

您是否在Vagrant配置中（或直接在VirtualBox中）配置了主机和来宾之间的端口转发？是否确实考虑了此端口转发（您可以在VirtualBox设置中进行检查）？我是否应该查找特定的内容？如果您查看curl输出，您会发现当它尝试127.0.0.1时，它能够连接（它肯定连接到精简服务器，3001本地上没有其他运行工具）@qcsorgs请发布您的VagrantFile您完全正确。我复制/粘贴了一条端口转发线路，并将来宾端口保留为5432。因此，我是连接到博士后，而不是瘦。现在一切都好了。道具有如此伟大的本能，谢谢！

bundle exec thin start --ssl --ssl-key-file /etc/ssl/server.key --ssl-cert-file /etc/ssl/server.crt -p 3001