☰

Apache SSL 設定連線被拒絕 connect:errno=111

tag-icon • tag-icon opensuse openssl ssl apache-virtualhost
Apache SSL 設定連線被拒絕 connect:errno=111

我正在嘗試在舊的 opensuse 伺服器上配置 SSL：

openSUSE 11.4 (x86_64)
VERSION = 11.4
CODENAME = Celadon

我啟用了 apache SSL 模組：

apache2ctl -M
Loaded Modules:
 core_module (static)
 mpm_prefork_module (static)
 http_module (static)
 so_module (static)
 actions_module (shared)
 alias_module (shared)
 auth_basic_module (shared)
 authn_file_module (shared)
 authz_host_module (shared)
 authz_groupfile_module (shared)
 authz_default_module (shared)
 authz_user_module (shared)
 autoindex_module (shared)
 cgi_module (shared)
 dir_module (shared)
 env_module (shared)
 expires_module (shared)
 include_module (shared)
 log_config_module (shared)
 mime_module (shared)
 negotiation_module (shared)
 setenvif_module (shared)
 ssl_module (shared)
 userdir_module (shared)
 php5_module (shared)
 reqtimeout_module (shared)
 deflate_module (shared)
 headers_module (shared)
 rewrite_module (shared)
Syntax OK

並配置提供 SSL 憑證的虛擬主機（透過複製和編輯 vhost-ssl.template 並將其重新命名為 https.xxxxxxxx.conf）並重新啟動 apache。

當我嘗試連線時出現此錯誤：

openssl s_client -connect localhost:443
connect: Connection refused
connect:errno=111

這是安裝的 openssl 版本：

OpenSSL 1.0.1p 9 Jul 2015 (Library: OpenSSL 1.0.0c 2 Dec 2010)

如果它可以幫助這是我的 iptables 配置：

iptables -L -vn
Chain INPUT (policy ACCEPT 4641 packets, 815K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain OUTPUT (policy ACCEPT 1691 packets, 4745K bytes)
 pkts bytes target     prot opt in     out     source               destination

您能幫我理解為什麼我無法在 localhost 中連接到 443 連接埠嗎？

編輯：

我相信這是 apache 和附加 https.xxxxxxx.conf 檔案的問題：

httpd2 -S
VirtualHost configuration:
wildcard NameVirtualHosts and _default_ servers:
*:80                   is a NameVirtualHost
         default server xxxxxxxx.it (/etc/apache2/vhosts.d/xxxxxxxx.conf:3)
         port 80 namevhost xxxxxxxx.it (/etc/apache2/vhosts.d/xxxxxxxx.it.conf:3)
         port 80 namevhost XXX.XXX.XXX.XXX (/etc/apache2/vhosts.d/xxxxxxxx.it.conf:9)

在我的listen.conf中，如果啟用了SSL模組，它應該監聽443：

Listen 80


<IfDefine SSL>
    <IfDefine !NOSSL>
        <IfModule mod_ssl.c>

            Listen 443

        </IfModule>
    </IfDefine>
</IfDefine>

這是 netstat 的輸出：

netstat -tulpn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN      8105/mysqld         
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1847/sshd           
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      2179/master         
tcp        0      0 :::80                   :::*                    LISTEN      13330/httpd2-prefor 
tcp        0      0 :::21                   :::*                    LISTEN      1930/vsftpd         
tcp        0      0 :::22                   :::*                    LISTEN      1847/sshd           
tcp        0      0 ::1:25                  :::*                    LISTEN      2179/master

我修改了 /etc/sysconfig/apache2 檔案以開啟 SSL 模組

APACHE_SERVER_FLAGS="SSL"

現在它似乎可以在本地和遠端正確回應機器人：

openssl s_client -connect localhost:443
CONNECTED(00000003)
depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN = AddTrust External CA Root
verify return:1

自從我從瀏覽器獲取以來，我仍然遇到問題：

This site can’t be reached
xxxxxxxx.it unexpectedly closed the connection.
Try:

Checking the connection
Checking the proxy and the firewall
Running Network Diagnostics
ERR_CONNECTION_CLOSED

但我相信這個問題不相關

答案1

終於想通了！預設 Apache Listen.conf 沒有指派給機器的 IP 位址的項目。呃。我認為「listen 80」會覆蓋機器的所有IP位址。

相關內容