[GH-ISSUE #727] Https无法访问,Http 和TCP 都正常 #569

Closed
opened 2026-05-05 12:22:17 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @zhangxiangfeng on GitHub (Apr 28, 2018).
Original GitHub issue: https://github.com/fatedier/frp/issues/727

Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly.
(为了节约时间,提高处理问题的效率,不按照格式填写的 issue 将会直接关闭。)

Use the commands below to provide key information from your environment:
You do NOT have to include this information if this is a FEATURE REQUEST

What version of frp are you using (./frpc -v or ./frps -v)?
0.17.0

What operating system and processor architecture are you using (go env)?

从github下载的可执行文件 linux 64位

Configures you used:

frps.ini

[common]
bind_port = 7000
bind_udp_port=6000
kcp_bind_port=9000
vhost_http_port=80
vhost_https_port=443
subdomain_host=frp.openread.cn

frpc.ini

[common]
server_addr = server.frp.openread.cn
server_port = 7000

[test2]
type = http
local_ip = 172.18.0.1
local_port = 9333
subdomain = test2
use_encryption = true
use_compression = true


[test3]
type = https
local_ip = 172.18.0.1
local_port = 9333
subdomain = test3
use_encryption = true
use_compression = true

Steps to reproduce the issue:
1.访问 https://test3.frp.openread.cn/ 无效,截图如图

_ _20180428101658

_ _20180428101726

  1. 访问 http://test2.frp.openread.cn/ 一切正常 如图
    _ _20180428101718

Describe the results you received:

simon@simon-huoying:~/Desktop$ curl -v https://test3.frp.openread.cn/
*   Trying 47.96.66.74...
* TCP_NODELAY set
* Connected to test3.frp.openread.cn (47.96.66.74) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
* Curl_http_done: called premature == 1
* stopped the pause stream!
* Closing connection 0
curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

Describe the results you expected:

期望 https 方式,能和 http 请求一样,正常返回数据, 本地服务用的是 nodejs 的http-serve 模块 跑的web页面

Additional information you deem important (e.g. issue happens only occasionally):

Can you point out what caused this issue (optional)

Originally created by @zhangxiangfeng on GitHub (Apr 28, 2018). Original GitHub issue: https://github.com/fatedier/frp/issues/727 Issue is only used for submiting bug report and documents typo. If there are same issues or answers can be found in documents, we will close it directly. (为了节约时间,提高处理问题的效率,不按照格式填写的 issue 将会直接关闭。) Use the commands below to provide key information from your environment: You do NOT have to include this information if this is a FEATURE REQUEST **What version of frp are you using (./frpc -v or ./frps -v)?** 0.17.0 **What operating system and processor architecture are you using (`go env`)?** 从github下载的可执行文件 linux 64位 **Configures you used:** **frps.ini** ``` [common] bind_port = 7000 bind_udp_port=6000 kcp_bind_port=9000 vhost_http_port=80 vhost_https_port=443 subdomain_host=frp.openread.cn ``` **frpc.ini** ``` [common] server_addr = server.frp.openread.cn server_port = 7000 [test2] type = http local_ip = 172.18.0.1 local_port = 9333 subdomain = test2 use_encryption = true use_compression = true [test3] type = https local_ip = 172.18.0.1 local_port = 9333 subdomain = test3 use_encryption = true use_compression = true ``` **Steps to reproduce the issue:** 1.访问 https://test3.frp.openread.cn/ 无效,截图如图 ![_ _20180428101658](https://user-images.githubusercontent.com/10842186/39391242-142c9752-4ad3-11e8-97a2-69d7c87c1d43.png) ![_ _20180428101726](https://user-images.githubusercontent.com/10842186/39391244-1a9d8182-4ad3-11e8-9128-47410f42d64f.png) 2. 访问 http://test2.frp.openread.cn/ 一切正常 如图 ![_ _20180428101718](https://user-images.githubusercontent.com/10842186/39391248-28dadeb6-4ad3-11e8-8e21-630a36b2baa0.png) **Describe the results you received:** ``` simon@simon-huoying:~/Desktop$ curl -v https://test3.frp.openread.cn/ * Trying 47.96.66.74... * TCP_NODELAY set * Connected to test3.frp.openread.cn (47.96.66.74) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/certs/ca-certificates.crt CApath: /etc/ssl/certs * TLSv1.2 (OUT), TLS header, Certificate Status (22): * TLSv1.2 (OUT), TLS handshake, Client hello (1): * error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol * Curl_http_done: called premature == 1 * stopped the pause stream! * Closing connection 0 curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol ``` **Describe the results you expected:** 期望 https 方式,能和 http 请求一样,正常返回数据, 本地服务用的是 nodejs 的http-serve 模块 跑的web页面 **Additional information you deem important (e.g. issue happens only occasionally):** **Can you point out what caused this issue (optional)**
Author
Owner

@zhangxiangfeng commented on GitHub (Apr 28, 2018):

这是web监控页面

_ _20180428110642

<!-- gh-comment-id:385135418 --> @zhangxiangfeng commented on GitHub (Apr 28, 2018): **这是web监控页面** ![_ _20180428110642](https://user-images.githubusercontent.com/10842186/39391337-40f96d04-4ad4-11e8-9f9c-9ca191225b0f.png)
Author
Owner

@fatedier commented on GitHub (May 1, 2018):

你对 https 的使用方式可能有些误解,https 后端的服务需要是一个 https 服务而不是 http,frp 不处理证书相关的内容,需要将 http 转换成 https 请使用 nginx。

<!-- gh-comment-id:385621035 --> @fatedier commented on GitHub (May 1, 2018): 你对 https 的使用方式可能有些误解,https 后端的服务需要是一个 https 服务而不是 http,frp 不处理证书相关的内容,需要将 http 转换成 https 请使用 nginx。
Author
Owner

@zhangxiangfeng commented on GitHub (May 4, 2018):

这样啊,知道了............

<!-- gh-comment-id:386530022 --> @zhangxiangfeng commented on GitHub (May 4, 2018): 这样啊,知道了............
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#569
No description provided.