關于全棧項目【臻美Chat】https訪問 遇到的問題【技術棧:Nodejs】

首先我上線時可以http訪問也可以https訪問,那么配置如下:
nginx.conf

user root;
worker_processes auto;
error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

# Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
    worker_connections 1024;
}

http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    # Load modular configuration files from the /etc/nginx/conf.d directory.
    # See http://nginx.org/en/docs/ngx_core_module.html#include
    # for more information.
    include /etc/nginx/conf.d/*.conf;
    server {
        listen       80 default_server;
        listen       [::]:80 default_server;
        listen 443 ssl ;
        server_name  '域名';
        #ssl on;
        ssl_certificate cert/1_www.maomin.club_bundle.crt;

        ssl_certificate_key cert/2_www.maomin.club.key;

        ssl_session_timeout 5m;
        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        # Load configuration files for the default server block.
        include /etc/nginx/default.d/*.conf;
        location / {
           root /root/www/;
          index index.html index.htm;
        }
        location /chat3/ {
        proxy_pass https://你的外網(wǎng)ip:3003/;
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        }
        location /chat/ {
        proxy_pass https://你的外網(wǎng)ip:5000/;
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        }
        location /mes/ {
        proxy_pass http://你的外網(wǎng)ip:3011/;
        proxy_redirect off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /upload/ {
        proxy_pass http://172.16.0.4:8083/;
        proxy_redirect off;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        error_page 404 /404.html;
            location = /40x.html {
        }
        error_page 500 502 503 504 /50x.html;
            location = /50x.html {
        }
      }

 

以上是nginx.conf的配置。一般配置https都會這樣配置,但是如果你想http也可以訪問那么加上以下代碼

        listen       80 default_server;
        listen       [::]:80 default_server;

 

這里注意的是,需要注釋

 #ssl on;

 

這樣才能兩者都可以訪問。

還有在配置nginx.conf,需要注意

  location /chat/ {
        proxy_pass https://你的外網(wǎng)ip:5000/;
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        }

 

這處至關重要,我用了3天才解決https訪問問題,就是因為這處。所以當你使用node的https服務的時候,不妨根據(jù)我上面那段代碼。proxy_pass https://你的外網(wǎng)ip:5000/;這里是關鍵。






然后呢,我使用的是node服務端,因為要使用https訪問,所以要引入https服務。
以下是我的項目實例:
nodejs

var https = require('https');
var fs=require("fs");
var express = require('express');
var ws=require("socket.io");
var path=require("path");
var _ = require('underscore');
var usocket = [];
var usocket1 = [];
var pass=[];
var data=[];
var hashName = {};
var onlineCount = 0;
var app = express();
app.all("*", function (req, res, next) {
    //設置允許跨域的域名,*代表允許任意域名跨域
    res.header("Access-Control-Allow-Origin", "*");
    //允許的header類型
    res.header("Access-Control-Allow-Headers", "content-type");
    //跨域允許的請求方式
    res.header("Access-Control-Allow-Methods", "DELETE,PUT,POST,GET,OPTIONS");
    if (req.method.toLowerCase() == 'options')
        res.send(200); //讓options嘗試請求快速結束
    else
        next();
})
//你的證書
var options = {
    key: fs.readFileSync('./2_www.maomin.club.key'),
    cert: fs.readFileSync('./1_www.maomin.club_bundle.crt')
}
// 靜態(tài)文件識別
app.use(express.static('./public'));
var server = https.createServer(options,app)
function get_file_content(filepath) {
    return fs.readFileSync(filepath);
}
// 獲取在線
function broadcast() {
    io.sockets.emit("dataval", hashName);
}
// 提供私有socket
function privateSocket(toId) {
    return (_.findWhere(io.sockets.sockets, {
        id: toId
    }));
}
// 封裝刪除
function removeByValue(arr, val) {
    for (var i = 0; i < arr.length; i++) {
        if (arr[i] == val) {
            arr.splice(i, 1);
            break;
        }
    }
}
// 連接socket
var io=ws(server);
io.on("connection",function(socket){
// 寫入成功后讀取測試
fs.readFile('./user.xls', 'utf-8', function (err, data) {
    if(data!=null){
    var value = data.split('\n');
     io.sockets.emit("users", value);    
    }

});
// 寫入成功后讀取測試
fs.readFile('./password.xls', 'utf-8', function (err,data) {
    if(data!=null){
    var pass1=data.split('\n');
    io.sockets.emit("pass", pass1);
    }
});
    broadcast();
// 生成名字
socket.on('setName', function (data) {
    var name = data;
    hashName[name] = socket.id;
    // console.log(hashName[name]);
    broadcast();
});
// 私聊發(fā)送
socket.on('sayTo', function (data) {
    var toName = data.to;
    var toId;
    console.log(toName);
    if (toId = hashName[toName]) {
        privateSocket(toId).emit('message1', data);
    }
});
// 群發(fā)
socket.on("message",function(mes){
        // console.log(mes);
        io.emit("message", mes);
    });
// 離開
socket.on('disconnect', function (name) {
         io.emit('disconnected', --onlineCount);
         name=this.i2;
         io.emit("disconnect", name);
         removeByValue(data, name);
         io.sockets.emit("dataval", data);
    })
// 在線
socket.on('time', function (val) {
        // console.log(val);
   })
// 注冊
socket.on("reg", function (name) {
          usocket[name] = socket;
          this.i1=name;
          io.emit("reg", name);
          var myname =this.i1+"\n";
          fs.writeFile('./user.xls', myname, {
              'flag': 'a'
          }, function (err) {
              if (err) {
                  throw err;
              }
              // 寫入成功后讀取測試
              fs.readFile('./user.xls', 'utf-8', function (err,data) {
                  if (err) {
                      throw err;
                  }
              });
          });
    })
// 加入
io.emit('connected', ++onlineCount);
    // console.log(data);
    io.sockets.emit("array", data);
    socket.on("join", function (name) {
        usocket1[name] = socket;
        this.i2 = name;
        io.emit("join", name);
        data.push(name);
         io.sockets.emit("dataval", data);
    })
// 密碼
socket.on("pass",function(val){
        pass[val]=socket;
        this.i2=val;
        io.emit("pass", val);
        var password=this.i2+"\n";
         fs.writeFile('./password.xls', password, {
              'flag': 'a'
          }, function (err) {
              if (err) {
                  throw err;
              }
          });
    })
});
server.listen(5000)
console.log("服務器運行中");

 

最后呢,你需要在前臺js中修改如下:
index.js

var socket = io.connect("https://域名:5000/");

 

這樣你就可以使用https訪問了。


 

































作者:Vam的金豆之路

主要領域:前端開發(fā)

我的微信:maomin9761

微信公眾號:前端歷劫之路