Getting SSL_PROTOCOL_ERROR

I don't, but I googled it and I found a handy guide. I'm not sure what I did was right, though.

1 Like

If you care to show the code you made, we can probably help you with it.

3 Likes

That's why I linked the handy guide, because that's exactly what I did! :slight_smile:

1 Like

So you typed in EXACTLY what you saw - with zero customization to your specific use?

Please show the full output of:
sudo nginx -T

The guide speaks about obtaining/installing nginx - you already had it installed.
I sure hope you skipped those steps.

4 Likes

Nope, I customized it and skipped the steps I already did. Not exactly sure what goes in instead of "http://my_server;"

Here is the output:

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
# configuration file /etc/nginx/nginx.conf:
user www-data;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
        worker_connections 768;
        # multi_accept on;
}
http {
        ##
        # Basic Settings
        ##
        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 65;
        types_hash_max_size 2048;
        # server_tokens off;
        # server_names_hash_bucket_size 64;
        # server_name_in_redirect off;
        include /etc/nginx/mime.types;
        default_type application/octet-stream;
        ##
        # SSL Settings
        ##
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
        ##
        # Logging Settings
        ##
        access_log /var/log/nginx/access.log;
        error_log /var/log/nginx/error.log;
        ##
        # Gzip Settings
        ##
        gzip on;
        gzip_disable "msie6";
        # gzip_vary on;
        # gzip_proxied any;
        # gzip_comp_level 6;
        # gzip_buffers 16 8k;
        # gzip_http_version 1.1;
        # gzip_types text/plain text/css application/json application/javascript text/xml application/xml applicati
on/xml+rss text/javascript;
        ##
        # Virtual Host Configs
        ##
        include /etc/nginx/conf.d/*.conf;
        include /etc/nginx/sites-enabled/*;
}
#mail {
#       # See sample authentication script at:
#       # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
# 
#       # auth_http localhost/auth.php;
#       # pop3_capabilities "TOP" "USER";
#       # imap_capabilities "IMAP4rev1" "UIDPLUS";
# 
#       server {
#               listen     localhost:110;
#               protocol   pop3;
#               proxy      on;
#       }
# 
#       server {
#               listen     localhost:143;
#               protocol   imap;
#               proxy      on;
#       }
#}
# configuration file /etc/nginx/modules-enabled/50-mod-http-auth-pam.conf:
load_module modules/ngx_http_auth_pam_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-dav-ext.conf:
load_module modules/ngx_http_dav_ext_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-echo.conf:
load_module modules/ngx_http_echo_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-geoip.conf:
load_module modules/ngx_http_geoip_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-image-filter.conf:
load_module modules/ngx_http_image_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-subs-filter.conf:
load_module modules/ngx_http_subs_filter_module.so;

# configuration file /etc/nginx/modules-enabled/50-mod-http-upstream-fair.conf:
load_module modules/ngx_http_upstream_fair_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-http-xslt-filter.conf:
load_module modules/ngx_http_xslt_filter_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-mail.conf:
load_module modules/ngx_mail_module.so;
# configuration file /etc/nginx/modules-enabled/50-mod-stream.conf:
load_module modules/ngx_stream_module.so;
# configuration file /etc/nginx/mime.types:
types {
    text/html                             html htm shtml;
    text/css                              css;
    text/xml                              xml;
    image/gif                             gif;
    image/jpeg                            jpeg jpg;
    application/javascript                js;
    application/atom+xml                  atom;
    application/rss+xml                   rss;
    text/mathml                           mml;
    text/plain                            txt;
    text/vnd.sun.j2me.app-descriptor      jad;
    text/vnd.wap.wml                      wml;
    text/x-component                      htc;
    image/png                             png;
    image/tiff                            tif tiff;
    image/vnd.wap.wbmp                    wbmp;
    image/x-icon                          ico;
    image/x-jng                           jng;
    image/x-ms-bmp                        bmp;
    image/svg+xml                         svg svgz;
    image/webp                            webp;
application/font-woff                 woff;
    application/java-archive              jar war ear;
    application/json                      json;
    application/mac-binhex40              hqx;
    application/msword                    doc;
    application/pdf                       pdf;
    application/postscript                ps eps ai;
    application/rtf                       rtf;
    application/vnd.apple.mpegurl         m3u8;
    application/vnd.ms-excel              xls;
    application/vnd.ms-fontobject         eot;
    application/vnd.ms-powerpoint         ppt;
    application/vnd.wap.wmlc              wmlc;
    application/vnd.google-earth.kml+xml  kml;
    application/vnd.google-earth.kmz      kmz;
    application/x-7z-compressed           7z;
    application/x-cocoa                   cco;
    application/x-java-archive-diff       jardiff;
    application/x-java-jnlp-file          jnlp;
    application/x-makeself                run;
    application/x-perl                    pl pm;
    application/x-pilot                   prc pdb;
    application/x-rar-compressed          rar;
    application/x-redhat-package-manager  rpm;
    application/x-sea                     sea;
    application/x-shockwave-flash         swf;
    application/x-stuffit                 sit;
    application/x-tcl                     tcl tk;
    application/x-x509-ca-cert            der pem crt;
    application/x-xpinstall               xpi;
    application/xhtml+xml                 xhtml;
    application/xspf+xml                  xspf;
    application/zip                       zip;
application/octet-stream              bin exe dll;
    application/octet-stream              deb;
    application/octet-stream              dmg;
    application/octet-stream              iso img;
    application/octet-stream              msi msp msm;
    application/vnd.openxmlformats-officedocument.wordprocessingml.document    docx;
    application/vnd.openxmlformats-officedocument.spreadsheetml.sheet          xlsx;
    application/vnd.openxmlformats-officedocument.presentationml.presentation  pptx;
    audio/midi                            mid midi kar;
    audio/mpeg                            mp3;
    audio/ogg                             ogg;
    audio/x-m4a                           m4a;
    audio/x-realaudio                     ra;
    video/3gpp                            3gpp 3gp;
    video/mp2t                            ts;
    video/mp4                             mp4;
    video/mpeg                            mpeg mpg;
    video/quicktime                       mov;
    video/webm                            webm;
    video/x-flv                           flv;
    video/x-m4v                           m4v;
    video/x-mng                           mng;
    video/x-ms-asf                        asx asf;
    video/x-ms-wmv                        wmv;
    video/x-msvideo                       avi;
}
# configuration file /etc/nginx/sites-enabled/rpnow.conf:
server {
listen 80;
location / {
proxy_pass http://loveinthedark.net;
}
}
1 Like

try changing that line to:
proxy_pass http://10.128.0.2:8000;

4 Likes

I changed it to that, it still says connection refused. I also tried several different server URLs, like 10.128.0.0:8000, and the external IP of the VM instance.

I just don't understand why the connection is refused. What does that mean, exactly? I tried finding out online but all it gives me is what to do on the other end (like delete browser cookies, update firewall, stuff like that).

1 Like

Did I exhaust all my options? I'd understand, we tried a lot! I'm just so confused. What could cause the refused connection?

1 Like

I haven't read most of this thread at all, but I looked back quickly and noticed that you previously said you have (only)

tcp6       0      0 :::8000                 :::*                    LISTEN      31788/rpnow

this is the IPv6 localhost, which is not 10.128.0.2 but only the IPv6 address ::1 (it's possible that your OS also maps it to the IPv4 localhost 127.0.0.1). Is your reverse proxy the same physical machine as the machine that is running the rpnow service? If so, the proxy_pass should point to one of these localhost addresses, like [::1]:8000 or 127.0.0.1:8000, instead of 10.128.0.2. If not, you need to make the rpnow process listen on an externally-visible address.

3 Likes

Sorry, college is kicking my butt.

Thank you for your reply!
How do I know which is an externally visible address?

1 Like

Try these:
curl -4 ifconfig.co
curl -6 ifconfig.co

4 Likes

The addresses beginning with 127 are localhost addresses (only valid within that computer to let software on that computer communicate with other software on that computer), while the addresses beginning with 10 are private addresses (only valid within your network to let one machine your network communicate with another machine on your network).

Other addresses, like those that the commands @rg305 mentioned will show, are public addresses, which the rest of the Internet can use to communicate with public services that you run.

6 Likes

Thank you for the detailed explanation, I appreciate it a lot!
curl -4 ifconfig.co gave me the external IP address of the google VM instance, which I have tried to put in the configuration file before.
And when I tried curl -6 ifconfig.co, I got "curl: (7) Couldn't connect to server"
Huh? :frowning:

2 Likes

That error usually means that the computer where you're running curl currently doesn't have IPv6 connectivity at all. In that case, there is no IPv6 address for you to discover for it.

4 Likes

Ohh I see!
When I change the server address in the configuration file, I check if nginx is working, restart it, and then try if I can access the website - up until now to no avail. What am I doing wrong?

1 Like

Different question, is there any way of getting the stored data if I can't access the website? There's the possibility to download a txt file of the content when the site's working... After all this, it's pretty much my only goal: to save the content.

1 Like

Aren't you the administrator of the site? Do you administer it over ssh?

If so, then you should be able to use scp, sftp, or rsync to copy the files off of the server (although they would be in whatever form they are stored on the server in, depending on how you created the content on the web site, which might not be the format that you wanted).

4 Likes

I use ssh, but I followed a guide to get the google VM and install rpnow on it. Honestly, I only have a really small idea about what I did there. The creator of the guide doesn't respond to my emails unfortunately.

I know I created a disk for the VM I'm running, but I don't know if that's of any help. I'll look further into the commands, I just don't know where the files would be located :unamused:

1 Like

Aright, I emailed the creator of RPNow and hope for a reply. I basically asked him the same thing, how to get the data off the server.
I'd love to be able to use the server again, but at this point I'm just so lost, I can't even describe to my text roleplay partner what's wrong.

Regarding the command to copy the files, I probably have to know where they are stored to get them, correct? I tried looking the individual commands up, and it's confusing. Maybe because I'm using all my brain juice for my studies haha

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.