WebSocket 打开握手在 https 中超时

Question

与 'wss://ip_address:8008/ws/events?subscribe-broadcast' 的 WebSocket 连接失败：WebSocket 打开握手超时

仅当在 HTTPS 中打开 UI 时超时，在 HTTP 中它工作...

我在 ubuntu

中使用 OpenSSL 生成了证书

我的uwsgi配置是

socket = /tmp/uwsgi.sock   
chmod-socket = 666  
socket-timeout = 60 
chdir = <django path>
wsgi-file  = <django_path>/wsgi.py
virtualenv = <path_to_virtualenv>
vacuum = true
enable-threads  = true
threads=500
startup-timeout = 15
graceful-timeout = 15
http-socket=<my_ip>:8008
http-websockets=true

我的 nginx 配置是

server {
listen <ip>:80 default;
listen <ip>:443 ssl http2 default_server;
ssl_certificate <path>/generate_crt.crt;
ssl_certificate_key <path>/generated_key.key;
client_body_buffer_size 500M;
client_body_timeout 300s;
keepalive_timeout 5000;
client_max_body_size 700M;
access_log syslog:server=unix:/dev/log;
root /tmp/MVM_APPS/angularjs/dist;
index index.html index.htm;
server_name localhost;
location /api {
uwsgi_pass unix:///tmp/uwsgi.sock;
    include uwsgi_params;
    uwsgi_read_timeout 120;
    uwsgi_send_timeout 1000;
}
location /ws/ {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
proxy_pass http://<ip>:8008;
proxy_read_timeout 86400;
}
location /static {
    alias /<path>/static;
}
location / {
    try_files $uri $uri/ /index.html;
}
}

我正在使用带有 WS4redis 包的 Django。

Answer 1

为了 web-sockets 通过 Tls(wss) 协议工作，您需要生成 ssl 证书，生成证书后将以下行添加到 uwsgi.ini 文件。

https-socket=[ip]:[port], /path_to_server_certificate, /path_to_key

并重新启动服务器（您也可以选择再传递 2 个字段 [ciphers,ca]）可以找到更多详细信息 here.

或者，如果您的消息代理有能力，您可以使用 Mqtt 或 Stomp 等消息传递协议直接将其公开给客户端

WebSocket 打开握手在 https 中超时

WebSocket opening handshake timed out in https

django

ssl

nginx

websocket

uwsgi