用于 SVN + Nginx + HTTPS 的 SCM 管理器

Question

我想通过 HTTPS 设置 SCM-Manager。我已经在 Debian 上进行了安装。我使用具有本地 IP 和 HTTP 的 SCM-Manager。 Nginx作为代理，将请求转为HTTPS。

proxy_pass http://127.0.0.1:8080;
proxy_redirect http://127.0.0.1:8080 https://repo.mydomain.org;
proxy_set_header X-Forwarded-Proto https;
include /etc/nginx/proxy.conf;

这是 SCM 配置：

<base-url>https://repo.mydomain.org/</base-url>

server-config.xml => <Set name="contextPath">/scm</Set>
                  => <Set name="forwarded">true</Set>
                  => <SystemProperty name="jetty.host" default="127.0.0.1" />

一切正常，但当我想查看差异或文件时出错。 URL 在 HTTP 而不是 HTTPS 上获取内容静止。这是不同浏览器（Firefox、Chrome、IE）的输出：

来自 Chrome:

Mixed Content: The page at 'https://repo.mydomain.org/#contentPanel;BQPsols4p3;null;trunk/init.php;content' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://repo.mydomain.org/api/rest/repositories/BQPsols4p3/content/?path=trunk/init.php&_dc=1470349149784'. This request has been blocked; the content must be served over HTTPS.

为什么系统尝试通过 HTTP 而不是 HTTPS 获取数据？

另一个小错误是软件试图获取这种语言脚本，但服务器上不存在这些脚本。

/resources/moment/lang/fr.js
/resources/extjs/i18n/ext-lang-fr.js
/resources/js/i18n/fr.js
/resources/moment/lang/fr.js
/resources/extjs/i18n/ext-lang-fr.js
/resources/js/i18n/fr.js

如何去除这些404？

编辑

这里是 Nginx 的完整配置：

user www-data;
#worker_processes auto;
worker_processes  4;
worker_rlimit_nofile  20480;
pid /run/nginx.pid;

events {
    worker_connections 8192;
    use epoll;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile off;
    tcp_nopush off;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;

    client_body_timeout   60s;
    client_header_timeout 60s;
    # server_name_in_redirect off;

    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    ##
    # SSL Settings
    ##

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;

    ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    gzip on;
    gzip_disable "msie6";
    gzip_comp_level 1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    ssl   off;

    upstream scm {
        server 127.0.0.1:8080;
    }

    ##
    # nginx-naxsi config
    ##
    # Uncomment it if you installed nginx-naxsi
    ##

    #include /etc/nginx/naxsi_core.rules;

    ##
    # Virtual Host Configs
    ##

     server {
           listen       80 default;
           server_name  _;
           #access_log  /var/log/nginx/host.access.log  main;

           location ~* ^.+\.(jpg|jpeg|gif|png|ico|css|zip|tgz|gz|rar|bz2|doc|xls|exe|pdf|ppt|txt|tar|mid|midi|wav|bmp|rtf|js|mov|swf|dcr)$ {
               root  /home/www/public_html;
               access_log   off;
               expires      30d;
           }

           location / {
               root  /home/www/public_html;
           }

           location ~ /\.ht {
               deny  all;
           }

           location /nginx_status {
               stub_status on;
               access_log off;
               allow 127.0.0.1;
               deny all;
           }
    }


    include /etc/nginx/sites-enabled/*;
}

站点已启用（最新配置测试）：

server {
    listen       80;
    server_name  repv.mydomain.org;

    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    listen       443 ssl;
    server_name  repv.mydomain.org;
    #access_log  /var/log/nginx/host.access.log  main;
    error_log /var/log/nginx/error.log;

    ssl on;
    ssl_certificate     /home/ssl/letsencrypt/live/repv.mydomain.org/fullchain.pem;
    ssl_certificate_key /home/ssl/letsencrypt/live/repv.mydomain.org/privkey.pem;

    ssl_stapling            on;
    ssl_stapling_verify     on;
    ssl_trusted_certificate /home/ssl/letsencrypt/live/repv.mydomain.org/fullchain.pem;

    ssl_ciphers               "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_protocols             TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    ssl_session_cache         shared:SSL:10m;
    ssl_session_timeout       5m;
    ssl_dhparam               /home/ssl/private/dhparams.pem;

    location / {
        rewrite ^([^.]*[^/])$ http://$host/ permanent;

        proxy_pass http://scm;
        include /etc/nginx/proxy.conf;
        proxy_redirect http://scm https://repv.mydomain.org;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Ctx "";
    }

}

和 proxy.conf :

proxy_redirect          off;
proxy_set_header        Host            $host;
proxy_set_header        X-Real-IP       $remote_addr;
proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_hide_header       X-Powered-By;
client_max_body_size        20m;
client_body_buffer_size     1024k;
send_timeout                90;
proxy_connect_timeout       90;
proxy_send_timeout          90;
proxy_read_timeout          90;
proxy_buffer_size           16k;
proxy_buffers               8 32k;
proxy_busy_buffers_size     64k;
proxy_temp_file_write_size  64k;
proxy_buffering             on;
proxy_http_version          1.1;

编辑 2

我已经尝试切换到 HTTP。但我有同样的问题。当我想查看文件或差异时，我收到消息 "The resource could not be found"。原因是调用的 ajax 资源 return 没有内容的 404 错误。

示例：“http://repo.mydomain.org/api/rest/repositories/BQPsols4p3/content/?path=trunk/init.php&revision=30&_dc=1472061397498" returns a 404... ; and the same for raw view "http://repo.mydomain.org/api/rest/repositories/BQPsols4p3/content/?path=trunk/init.php&revision=30”return是 404。

你能帮我找出问题所在吗？

感谢您的帮助，

史蒂芬

Answer 1

我找到了让所有堆栈正常工作的方法。

首先，我从 Nginx 中删除了以下行：

rewrite ^([^.]*[^/])$ http://$host/ permanent;

接下来，我将我的 SVN 文件“/home/local/svn”的权限更改为 'chown -Rc scm:scm /home/local/svn'。

最后，当我从旧的 SVN 服务器 1.6 迁移时，我在 SCM 管理器中激活了 Pre 1.6 选项（不要忘记重新启动您的服务器）。

目前一切正常！

希望这对某人有所帮助:)

用于 SVN + Nginx + HTTPS 的 SCM 管理器

SCM-Manager for SVN + Nginx + HTTPS

svn

version-control

repository

scmmanager