Realm對象服務器 - SSL配置導致ROS失敗啓動

Question

Ubuntu 16.04/ROS v1.3.0

我正在嘗試將我的ROS配置爲使用安全SSL連接。

如果我不對configuration.yml進行任何更改 - ROS很好。我可以像我期望的那樣同步和使用儀表板。

我已經從Letsencrypt獲得SSL證書。我在獨立模式下使用CertBot，因此我不必安裝或配置Nginx。 （我的選擇是不安裝又一高科技/層 - 保持乾淨！）

我有存儲在該文件夾中的下列證書/鍵： /etc/letsencrypt/live/data.mydomain.net/cert.pem /etc/letsencrypt/live/data.mydomain.net/chain.pem /etc/letsencrypt/live/data.mydomain.net/fullchain.pem /etc/letsencrypt/live/data.mydomain.net/privkey.pem

只要我啓用configuration.yml中的HTTPS我無法啓動ROS。

有寫入任何錯誤消息： /var/log/realm-object-server.log

這裏是configuration.yml代理部分的副本。

http: 
    ## Whether or not to enable the HTTP proxy module. It enables multiplexing requests 
    ## by forwarding incoming requests on a single port to all services. 
    # enable: true 

    ## The address/interface on which the HTTP proxy module should listen. This defaults 
    ## to 127.0.0.1. If you wish to listen on all available interfaces, 
    ## uncomment the following line. 
    # listen_address: '::' 

    ## The port that the HTTP proxy module should bind to. 
    # listen_port: 9080 

    https: 
    ## Whether or not to enable the HTTPS proxy module. It enables multiplexing requests 
    ## by forwarding incoming requests on a single port to all services. 
    ## Note that even if it enabled, the HTTPS proxy will only start if supplied 
    ## with a valid pair of certificates through certificate_path and private_key_path below. 
    enable: true 

    ## The path to the certificate and private keys (in PEM format) that will be used 
    ## to set up the HTTPS server accepting connections. 
    ## These configuration options are MANDATORY to start the HTTPS proxy module. 
    certificate_path: '/etc/letsencrypt/live/data.mydomain.net/fullchain.pem' 
    private_key_path: '/etc/letsencrypt/live/data.mydomain.net/privkey.pem' 

    ## The address/interface on which the HTTPS proxy module should listen. This defaults 
    ## to 127.0.0.1. If you wish to listen on all available interfaces, 
    ## uncomment the following line. 
    # listen_address: '::' 

    ## The port that the HTTPS proxy module should bind to. 
    listen_port: 9443 

正如我所說。問題似乎是，只要配置HTTPS，ROS服務器就無法啓動。如果我禁用HTTPS，那麼ROS服務器啓動時沒有問題。

我相信ROS啓動失敗的原因是 - 如果我試圖curl 127.0.0.1:9080或curl 127.0.0.1:9443從終端我得到的消息curl: (7) Failed to connect to 127.0.0.1 port 9443: Connection refused

我很想聽聽你對我如何能得到你的想法/想法/建議這工作。乾杯。伊恩

Answer 1

感謝用戶@Radu - 答案是權限。

realm用戶沒有權限讀取.pem文件。

我拿起這個答案的答案。 Https Proxy for Realm Object Server not working

@Radu - 是男人！