ManageIQ停靠器容器不能与web浏览器连接

Question

我试着把manageiq监控测试到hawkular。我使用以下命令制作了manageiq码头容器

docker pull manageiq/manageiq:euwe-1
docker run --privileged -d -p 8443:443 manageiq/manageiq:euwe-1

我可以看到容器被生成并运行。但是，我不能用我的浏览器连接到ManageIQ，用这个url https://127.0.0.1:8443。在manageiq码头容器的日志文件中，如下所示，

[ssl:warn] [pid 815] AH01909: RSA certificate configured for 172.17.0.2:443 does NOT include an ID which matches the server name
[ssl:warn] [pid 815] AH01909: RSA certificate configured for 172.17.0.2:443 does NOT include an ID which matches the server name
[proxy:error] [pid 816] (111)Connection refused: AH00957: HTTP: attempt to connect to 0.0.0.0:3000 (0.0.0.0) failed
[proxy:error] [pid 816] AH00959: ap_proxy_connect_backend disabling worker for (0.0.0.0) for 60s
[proxy_http:error] [pid 816] [client 172.17.0.1:39140] AH01114: HTTP: failed to make connection to backend: 0.0.0.0
[proxy:error] [pid 819] (111)Connection refused: AH00957: HTTP: attempt to connect to 0.0.0.0:3000 (0.0.0.0) failed
[proxy:error] [pid 819] AH00959: ap_proxy_connect_backend disabling worker for (0.0.0.0) for 60s
[proxy_http:error] [pid 819] [client 172.17.0.1:39146] AH01114: HTTP: failed to make connection to backend: 0.0.0.0, referer: https://localhost:8443/

Answer 1

我被告知，修改码头容器内部的配置是不合适的，必须在码头容器之外配置码头网络。所以这就是我的决心。

1. Windows 10 :这个网站是用韩文写的。我希望你能找到并阅读英语网站。^_^

https://support.microsoft.com/ko-kr/help/3151631/rc4-cipher-is-no-longer-supported-in-internet-explorer-11-or-microsoft-edge

1. CentOS 7，火狐浏览器，

“环境配置”=>“=>”异常列表“Button =>”添加"https://localhost:8443/“URL

最后，用参考站点检查这个问题。

Answer 2

我解决了。原因是没有在码头容器上设置https连接。这就是过程，

1. 输入容器

码头主管-ti CONTAINER_ID bash -l

2.在容器上查找server.crt和server.key文件

根@17a6a6bd8743 vmdb# find / -name server.crt /opt/manageiq/manageiq-ui-service/node_modules/browser-sync/lib/server/certs/server.crt 根@17a6a6bd8743 vmdb# find / -name server.key /opt/manageiq/manageiq-ui-service/node_modules/browser-sync/lib/server/certs/server.key

1. 然后编辑/etc/httpd/conf.d文件，如下所示

根@17a6a6bd8743 vmdb# vi /etc/httpd/conf.d/ssl.conf ServerName本地主机:8443#指定服务器名 SSLProtocol -All +TLSv1 1 +TLSv1.1 +TLSv1.2 #类型ssl协议 /opt/manageiq/manageiq-ui-service/node_modules/browser-sync/lib/server/certs/server.crt # SSLCertificateFile键入server.crt的位置文件夹 /opt/manageiq/manageiq-ui-service/node_modules/browser-sync/lib/server/certs/server.key # SSLCertificateKeyFile键入server.key的位置文件夹

1. 设置httpd允许https

根@17a6a6bd8743 vmdb# systemctl重新启动httpd 根@17a6a6bd8743 vmdb# yum安装firewalld -y 根@17a6a6bd8743 vmdb#系统 根@17a6a6bd8743 vmdb#系统启用firewalld 根@17a6a6bd8743 vmdb#防火墙-cmd--add=https-永久 成功 根@17a6a6bd8743 vmdb#防火墙-cmd-重新加载 成功

好的!配置设置得很完美。连接https://localhost:8443并享受！！