nginx反向代理https的问题 - nginx报错

没试过https，只能提示一下后端的服务器监听的servername是什么？送到后端的host参数会不会是代理机的ip？######通常都是代理服务器跟实际服务器直接用http，######

参考 https://www.nginx.com/resources/admin-guide/nginx-https-upstreams/ 配置下吧

试试 

proxy_ssl_verify   off

证书放nginx上 不用放后端服务器

实体服务器应该不用配置，ssl证书需要配置在nginx上，参考 http://www.ahlinux.com/tomcat/21139.html配置： 

nginx

server {
        listen 443;
        server_name ssl.geeksy.pro;

#       root html;
#       index index.html index.htm;

        ssl on;
        ssl_certificate /home/song/nginxSSL/nginx.crt;
        ssl_certificate_key /home/song/nginxSSL/nginx.key;

        ssl_session_timeout 5m;

        ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
        ssl_prefer_server_ciphers on;

        location / {
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Host $http_host;
                proxy_set_header X-Forwarded-Proto https;
                proxy_redirect off;
                proxy_connect_timeout 240;
                proxy_send_timeout 240;
                proxy_read_timeout 240;
                 # note, there is not SSL here!plain HTTP is used
                proxy_pass http://127.0.0.1:8080;
        }
}

tomcat

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="443"
               proxyPort="443"  />

         <Valve className="org.apache.catalina.valves.RemoteIpValve"
                remoteIpHeader="x-forwarded-for" 

个人理解：ssl防止中间有人篡改传输的信息，所以浏览器与你出口的服务器之间是加密的，所以你的ssl需要放在你的nginx上来配置，而不能让信息再转发到另一个upstream上。能力有限，有错误的地方请斧正~

证书是要配置在nginx上的

nginx

server {
        listen 443;
        server_name ssl.geeksy.pro;

#       root html;
#       index index.html index.htm;

        ssl on;
        ssl_certificate /home/song/nginxSSL/nginx.crt;
        ssl_certificate_key /home/song/nginxSSL/nginx.key;

        ssl_session_timeout 5m;

        ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
        ssl_prefer_server_ciphers on;

        location / {
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Host $http_host;
                proxy_set_header X-Forwarded-Proto https;
                proxy_redirect off;
                proxy_connect_timeout 240;
                proxy_send_timeout 240;
                proxy_read_timeout 240;
                 # note, there is not SSL here!plain HTTP is used
                proxy_pass http://127.0.0.1:8080;
        }
}

tomcat

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="443"
               proxyPort="443"  />

         <Valve className="org.apache.catalina.valves.RemoteIpValve"
                remoteIpHeader="x-forwarded-for" 

非常感谢各位，我问题解决了，把ssl证书配置在前端，然后其他还是一样，转发给后端服务器，就成功实现了