服务器 Gind.cn
  1. 服务器 Gind.cn
  3. SSL / HTTP /没有响应Curl
Intereting Posts
创build不需要validation的共享 我可以得到我的aws实例的备份吗？ PHP与fcgid不工作后，升级到wheezy 将现有的VPC（或子网/安全组）作为parameter passing给模板使用Ref内置？ openvpn config应该如何隧道“所有stream量”通过VPN？ 从CFEngine切换到Rudder的正确方法是什么？ 使用SRVlogging时TLS证书的名称 Postfixconfiguration/多个虚拟主机 通讯组列表不在全局地址列表中显示 – Exchange 2010 如何避免在Nginx的add_header指令的重复？ 如何删除Ubuntu 10.04（服务器）中的所有Couchdb版本？ （经过多次安装） 在spamcop.bl.net上列出 – 为什么？ 免费的替代Windows和MS Office的基本办公室工作 反复出现的硬盘指示灯每隔2秒在ext4中闪烁 组件和服务文档平台迁移要求

SSL / HTTP /没有响应Curl

我正试图发送命令到一个SOAP服务，并没有得到任何答复。 SOAP服务与我正在testing的服务器位于完全独立的站点上。

我写了一个embedded了SOAP XML的虚拟脚本。 当我在我的本地站点上运行它时，在三台机器（OSX，Ubuntu或CentOS 5.3）中的任何一台上运行，它都能够成功完成并得到很好的响应。

然后，我将脚本发送到Slicehost的公共主机，在那里我无法从SOAP服务获取响应。 它接受TCP套接字并继续进行SSL握手。 我没有收到任何有效的HTTP响应。

无论是在命令行上使用我的脚本还是curl，都是这种情况。 我用SOAP4R，Net :: HTTP和Curb重写了脚本。 所有这些工作在我的本地站点，没有一个在Slicehost站点工作。

我试图组装CentOS盒子，以尽可能匹配我的Slicehost服务器。 我将Slice重build为CentOS 5.3股票，CentOS 5.4股票的结果相同。

当我查看Slicehost上不良会话的tcpdump时，我看到我的脚本或curl将XML发送到远程服务器，并且没有任何回应。 当我在我的本地站点查看tcpdump时，我看到响应很好。 我完全禁用了Slice上的iptables。

有没有人有任何想法可能导致这些结果？ 请让我知道我可以提供什么额外的信息。

谢谢！

以下是一个示例会话的线索。 以173开头的IP是我的服务器，而以12开头的IP是SOAP服务器。 

No. Time Source Destination Protocol Info 1 0.000000 173.45.xx 12.36.xx TCP 36872 > https [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=137633469 TSER=0 WS=6 Frame 1 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 2 0.040000 12.36.xx 173.45.xx TCP https > 36872 [SYN, ACK] Seq=0 Ack=1 Win=8760 Len=0 MSS=1460 Frame 2 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 3 0.040000 173.45.xx 12.36.xx TCP 36872 > https [ACK] Seq=1 Ack=1 Win=5840 Len=0 Frame 3 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 4 0.050000 173.45.xx 12.36.xx SSLv2 Client Hello Frame 4 (156 bytes on wire, 156 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 1, Ack: 1, Len: 102 Secure Socket Layer No. Time Source Destination Protocol Info 5 0.130000 12.36.xx 173.45.xx TCP [TCP segment of a reassembled PDU] Frame 5 (1434 bytes on wire, 1434 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 1, Ack: 103, Len: 1380 Secure Socket Layer No. Time Source Destination Protocol Info 6 0.130000 173.45.xx 12.36.xx TCP 36872 > https [ACK] Seq=103 Ack=1381 Win=8280 Len=0 Frame 6 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 103, Ack: 1381, Len: 0 No. Time Source Destination Protocol Info 7 0.130000 12.36.xx 173.45.xx TLSv1 Server Hello, Certificate, Server Hello Done Frame 7 (1280 bytes on wire, 1280 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 1381, Ack: 103, Len: 1226 [Reassembled TCP Segments (2606 bytes): #5(1380), #7(1226)] Secure Socket Layer No. Time Source Destination Protocol Info 8 0.130000 173.45.xx 12.36.xx TCP 36872 > https [ACK] Seq=103 Ack=2607 Win=11040 Len=0 Frame 8 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 103, Ack: 2607, Len: 0 No. Time Source Destination Protocol Info 9 0.130000 173.45.xx 12.36.xx TLSv1 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message Frame 9 (236 bytes on wire, 236 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 103, Ack: 2607, Len: 182 Secure Socket Layer No. Time Source Destination Protocol Info 10 0.190000 12.36.xx 173.45.xx TLSv1 Change Cipher Spec, Encrypted Handshake Message Frame 10 (97 bytes on wire, 97 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 2607, Ack: 285, Len: 43 Secure Socket Layer No. Time Source Destination Protocol Info 11 0.190000 173.45.xx 12.36.xx TLSv1 Application Data Frame 11 (347 bytes on wire, 347 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 285, Ack: 2650, Len: 293 Secure Socket Layer No. Time Source Destination Protocol Info 12 0.190000 173.45.xx 12.36.xx TCP [TCP segment of a reassembled PDU] Frame 12 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 578, Ack: 2650, Len: 1460 Secure Socket Layer No. Time Source Destination Protocol Info 13 0.450000 12.36.xx 173.45.xx TCP https > 36872 [ACK] Seq=2650 Ack=578 Win=64958 Len=0 Frame 13 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 2650, Ack: 578, Len: 0 No. Time Source Destination Protocol Info 14 0.450000 173.45.xx 12.36.xx TCP [TCP segment of a reassembled PDU] Frame 14 (206 bytes on wire, 206 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 2038, Ack: 2650, Len: 152 No. Time Source Destination Protocol Info 15 0.510000 12.36.xx 173.45.xx TCP [TCP Dup ACK 13#1] https > 36872 [ACK] Seq=2650 Ack=578 Win=64958 Len=0 Frame 15 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Dell_fb:49:a1 (00:21:9b:fb:49:a1), Dst: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6) Internet Protocol, Src: 12.36.xx (12.36.xx), Dst: 173.45.xx (173.45.xx) Transmission Control Protocol, Src Port: https (443), Dst Port: 36872 (36872), Seq: 2650, Ack: 578, Len: 0 No. Time Source Destination Protocol Info 16 0.850000 173.45.xx 12.36.xx TCP [TCP Retransmission] [TCP segment of a reassembled PDU] Frame 16 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 578, Ack: 2650, Len: 1460 Secure Socket Layer No. Time Source Destination Protocol Info 17 1.650000 173.45.xx 12.36.xx TCP [TCP Retransmission] [TCP segment of a reassembled PDU] Frame 17 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 578, Ack: 2650, Len: 1460 Secure Socket Layer No. Time Source Destination Protocol Info 18 3.250000 173.45.xx 12.36.xx TCP [TCP Retransmission] [TCP segment of a reassembled PDU] Frame 18 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 578, Ack: 2650, Len: 1460 Secure Socket Layer No. Time Source Destination Protocol Info 19 6.450000 173.45.xx 12.36.xx TCP [TCP Retransmission] [TCP segment of a reassembled PDU] Frame 19 (1514 bytes on wire, 1514 bytes captured) Ethernet II, Src: 40:40:17:3a:f4:e6 (40:40:17:3a:f4:e6), Dst: Dell_fb:49:a1 (00:21:9b:fb:49:a1) Internet Protocol, Src: 173.45.xx (173.45.xx), Dst: 12.36.xx (12.36.xx) Transmission Control Protocol, Src Port: 36872 (36872), Dst Port: https (443), Seq: 578, Ack: 2650, Len: 1460 Secure Socket Layer

我想你有一些MTU问题。 当发送数据包大于networkingpath（PMTU）上的最小MTU时， Don't fragment位设置，并且Fragmentation needed but Don't Fragment bit set ICMP错误消息Fragmentation needed but Don't Fragment bit set为某处被阻塞。

您应该检查本地和远程防火墙，以便首先允许ICMP。

然后跟踪path以查看PMTU是什么以及包丢失的位置。 打开Don't fragment位！ 您应该在用于客户端 – 服务器通信的相同端口上执行此操作。 例如，使用hping2 。

如果没有帮助，closures两台机器上的PMTU发现。 

 sudo sysctl net.ipv4.ip_no_pmtu_disc = 0

使用这个不是个好主意，但是如果它能正常工作，你可以确定你有MTU问题。

祝你好运！

你能提供切片和本地主机（如果需要，IP被删除）tcpdup？

这可能有助于解决沟通失败/不同的地方。

理想情况下使用-v运行tcpdump以获得更好的输出。