linux的web服务已经启动了,本地可以http访问,但是远程却无法https方式访问
我在某机器上( 192.169.7.98 ) 通过docker部署了一个的web服务,本地可以curl方式访问:
[root@registry quay]# curl -k https://192.169.7.98:443/
<html>
<head><title>401 Authorization Required</title></head>
<body>
<center><h1>401 Authorization Required</h1></center>
<hr><center>nginx/1.12.1</center>
</body>
</html>
可见,虽然非https,虽然是401, 但是至少没有超时报错,至少有响应。
但远程就超时无响应,然后出现错误界面。如访问: https://192.169.7.98/, 会加载一段时间,然后出现:
当然,192.169.7.98 是可以ping得通的, 但是呢, 那个443 端口 无法访问。
[root@bastion ~]# nc -v 192.169.7.98 111
Ncat: Version 6.40 ( http://nmap.org/ncat )
Ncat: Connected to 192.169.7.98:111.
^C
[root@bastion ~]# nc -v 192.169.7.98 443
Ncat: Version 6.40 ( http://nmap.org/ncat )
Ncat: Connection timed out.
这就非常奇怪啊, 为什么会这样?
是不是docker部署的web服务 有问题呢, 但是查看他日志也没有错误..
回答
貌似是 证书或权限原因, 目前是 重新安装就好了。 郁闷
++++++++
Build, Store, and Distribute your Containers
Running all default registry services
Running init script '/quay-registry/conf/init/02_get_kube_certs.sh'
Running init script '/quay-registry/conf/init/certs_create.sh'
Generating a 4096 bit RSA private key
...............................................................................................................................................................++
................................................................++
unable to write 'random state'
writing new private key to 'mitm-key.pem'
Running init script '/quay-registry/conf/init/certs_install.sh'
find: ‘/quay-registry/conf/stack/ssl.key’: Permission denied
find: ‘/quay-registry/conf/stack/ssl.cert’: Permission denied
find: ‘/quay-registry/conf/stack/quay-config0713.tar.gz’: Permission denied
find: ‘/quay-registry/conf/stack/config.yaml’: Permission denied
Running init script '/quay-registry/conf/init/copy_config_files.sh'
Running init script '/quay-registry/conf/init/nginx_conf_create.sh'
Running init script '/quay-registry/conf/init/runmigration.sh'