NGINX和Chrome

这里有点疯了,把我的头发拉出来。 http://alpha.draser.co.uk上的网站适用于IE和Firefox(仅testing这些),不适用于Chrome。 我已经在我的电脑和远程服务器上testing过这个问题,并发生同样的问题。

alpha.draser.co.ukconfiguration

server { listen 37.230.100.89:80; root /var/www/draser/alpha/public; index index.php index.html index.htm; server_name alpha.draser.co.uk; location / { try_files $uri $uri/ /index.php$is_args$args; } location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; include fastcgi_params; } }` 

draser.co.ukconfiguration

 server { listen 37.230.100.89:80; if ($http_referer ~* (buttons-for-website.com)) { return 444; } server_name www.draser.co.uk draser.co.uk; return 301 https://draser.co.uk$request_uri; } server { listen 37.230.100.89:443 ssl; if ($http_referer ~* (buttons-for-website.com)) { return 444; } root /var/www/draser/live/public; index index.php index.html index.htm; server_name www.draser.co.uk draser.co.uk; ssl_certificate /etc/nginx/certs/draser/draser.crt; ssl_certificate_key /etc/nginx/certs/draser/draser.key; ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; add_header Strict-Transport-Security "max-age=63072000; includeSubDomains"; add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff; ssl_stapling on; # Requires nginx >= 1.3.7 ssl_stapling_verify on; location / { try_files $uri $uri/ /index.php$is_args$args; } location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php5-fpm.sock; fastcgi_index index.php; include fastcgi_params; } location ~ /\.ht { deny all; } } 

`

编辑:testing了两台PC上的所有3个浏览器。 试图清除Chromecaching无济于事。

alpha.draser.co.uk打SSL的原因是这个定义:

 add_header Strict-Transport-Security "max-age=63072000; includeSubDomains"; 

这告诉浏览器总是使用HTTPS连接到draser.co.uk任何子域。 当您请求https://draser.co.uk时,您首次从服务器接收到此设置。

这是SSL / TLS连接上的一项安全function。

configuration中的另一个问题:

您的证书文件缺less来自StartCom的中间证书,如Qualys SSL Test所示 。

因此,您需要下载http://www.startssl.com/certs/sub.class1.server.ca.pem并将其添加到draser.crt文件中的证书之后。