用SSL啓動CouchDB

我想通過SSL讓CouchDB在我們的服務器上工作。用SSL啓動CouchDB

我已經添加下面我們對Default.ini：

[daemons] 
... 
httpsd = {couch_httpd, start_link, [https]} 

[ssl] 
cert_file = /the/path/to/my/certicifate/here 
key_file = /the/path/to/my/key/here

當我重新啓動CouchDB的我得到我的couch.log以下文件：

[Fri, 27 May 2011 00:18:38 GMT] [error] [<0.86.0>] {error_report,<0.31.0>, 
{<0.86.0>,supervisor_report, 
[{supervisor,{local,couch_secondary_services}}, 
    {errorContext,start_error}, 
    {reason, 
     {'EXIT', 
      {undef, 
       [{couch_httpd,start_link,[https]}, 
       {supervisor,do_start_child,2}, 
       {supervisor,start_children,3}, 
       {supervisor,init_children,2}, 
       {gen_server,init_it,6}, 
       {proc_lib,init_p_do_apply,3}]}}}, 
    {offender, 
     [{pid,undefined}, 
     {name,httpsd}, 
     {mfargs,{couch_httpd,start_link,[https]}}, 
     {restart_type,permanent}, 
     {shutdown,1000}, 
     {child_type,worker}]}]}} 

[Fri, 27 May 2011 00:18:38 GMT] [error] [<0.78.0>] {error_report,<0.31.0>, 
{<0.78.0>,supervisor_report, 
[{supervisor,{local,couch_server_sup}}, 
    {errorContext,start_error}, 
    {reason,shutdown}, 
    {offender, 
     [{pid,undefined}, 
     {name,couch_secondary_services}, 
     {mfargs,{couch_server_sup,start_secondary_services,[]}}, 
     {restart_type,permanent}, 
     {shutdown,infinity}, 
     {child_type,supervisor}]}]}}

任何提示或建議？

來源

2011-05-27 Joel Jackson

本機SSL支持存在於CouchDB 1.1中，而當前的CouchDB版本是版本1.0.2 iirc。除非你從trunk或者類似的東西結帳，否則你的CouchDB本身不支持SSL。

來源

2011-05-27 10:09:27 titanoboa

哦，我很驚訝，我在我的谷歌的旅程，解決問題過程中沒跑成。謝謝你的幫助！ – 2011-05-27 17:01:18

如果有人有興趣，我們如何最終解決了這個：（當然在將來的版本中，你應該能夠做到我在我的問題問的東西。）

我們使用的nginx作爲沙發上的反向代理： http://wiki.apache.org/couchdb/Nginx_As_a_Reverse_Proxy

nginx的配置文件：

user www-data; 
worker_processes 1; 

error_log /var/log/nginx/error.log; 
pid  /var/run/nginx.pid; 

events { 
    worker_connections 1024; 
} 

http { 
    include  /etc/nginx/mime.types; 

    access_log /var/log/nginx/access.log; 

    sendfile  on; 

    keepalive_timeout 65; 
    tcp_nodelay  on; 

    gzip on; 
    gzip_disable "MSIE [1-6]\.(?!.*SV1)"; 

    include /etc/nginx/conf.d/*.conf; 
    include /etc/nginx/sites-enabled/*; 

    server { 
     listen   80; 
     server_name couch.touchmetric.com; 
     location/{ 
      proxy_pass http://localhost:5984; 
      proxy_redirect off; 
      proxy_set_header Host $host; 
      proxy_set_header X-Real-IP $remote_addr; 
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
     } 
    } 

    server { 
     listen   443; 
     server_name couch.touchmetric.com; 

     ssl on; 
     ssl_certificate /path/here; 
     ssl_certificate_key /other/path/here; 
     ssl_protocols SSLv3; 
     ssl_session_cache shared:SSL:1m; 

     location/{ 
      proxy_pass http://localhost:5984; 
      proxy_redirect off; 
      proxy_set_header Host $host; 
      proxy_set_header X-Real-IP $remote_addr; 
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
      proxy_set_header X-Forwarded-Ssl on; 
     } 
    } 

}

來源

2011-05-31 09:49:00

用SSL啓動CouchDB

回答

相關問題