AWS应用程序负载均衡器- https不能正常工作

Question

我有一个用React开发的web应用程序，对于服务器端的呈现，我使用的是NodeJS。以下是整体架构-

部署了

1. 在EC2 -Ubuntu18.04上使用Nginx
2. 从ACM
3. 获得SSL到EC2实例，添加了两个侦听器-端口80，端口443 (转发请求到端口80上的目标组)
4. 添加A记录，添加CNAME记录E 110>E 211E 211指向ALB H 212G 213

以下是我的nginx配置文件-

server {
        server_name mydomain.ai;
        return 301 https://www.mydomain.ai$request_uri;
}

server {
    listen 80 default_server;
    listen [::]:80 default_server;
    #server_name www.mydomain.ai;

    if ($host !~ ^www\.) {
        rewrite ^ https://$host$request_uri permanent;
    }

    root /var/www/html;

    # Add index.php to the list if you are using PHP
    index index.html index.htm index.nginx-debian.html;

    server_name _;

    location /error {
        # First attempt to serve request as file, then
        # as directory, then fall back to displaying a 404.
        try_files $uri $uri/ =404;
    }
    location / {
        proxy_set_header   X-Forwarded-For $remote_addr;
        proxy_set_header   Host $http_host;
        proxy_pass        http://127.0.0.1:8000;
    }
    
    location /aws/ {
        try_files $uri $uri/ /aws/aws.html;
    }
}

server {
  listen *:443 default_server;
  server_name mydomain.ai www.mydomain.ai;
  
  if ($host !~ ^www\.) {
        rewrite ^ https://$host$request_uri permanent;
    }

  location / {   
    proxy_hide_header 'Access-Control-Allow-Origin';
    add_header 'Access-Control-Allow-Origin' "*" always;
    add_header 'Access-Control-Allow-Credentials' 'true' always;
    add_header 'Access-Control-Allow-Methods' 'GET, POST, PUT, DELETE, OPTIONS' always;
    add_header 'Access-Control-Allow-Headers' 'Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With' always;
    proxy_pass https://localhost:8000;
    proxy_http_version 1.1;
  }

}

当我输入时，它会抛出"ERR_SSL_PROTOCOL_ERROR"，但是下面的情况很好-

mydomain.ai //redirected to https://www.mydomain.ai
http://mydomain.ai //redirected to https://www.mydomain.ai
http://www.mydomain.ai //redirected to https://www.mydomain.ai

有人能帮帮我吗？

Answer 1

我想你忘了把采购证书附在ALB上了。

可以通过下面提到的步骤从AWS控制台执行此操作：https://aws.amazon.com/premiumsupport/knowledge-center/associate-acm-certificate-alb-nlb/