2014-11-06 101 views
0

我使用的是Fedora 20,最近做了yum更新。现在我不能再用英镑工作了。没有真正的错误,只是拒绝连接:英镑在fedora更新后停止工作

以下输出是从不同时间复制和粘贴,但输出总是一样,除了PID和时间。

[[email protected] me]# wget --no-check-certificate --debug --verbose https://localhost 
Setting --verbose (verbose) to 1 
DEBUG output created by Wget 1.14 on linux-gnu. 

URI encoding = ‘UTF-8’ 
--2014-11-06 11:59:53-- https://localhost/ 
Resolving localhost (localhost)... ::1, 127.0.0.1 
Caching localhost => ::1 127.0.0.1 
Connecting to localhost (localhost)|::1|:443... Closed fd 3 
failed: Connection refused. 
Connecting to localhost (localhost)|127.0.0.1|:443... Closed fd 3 
failed: Connection refused. 
Releasing 0x0000000001f33280 (new refcount 1). 
[[email protected] me]# service pound status 
Redirecting to /bin/systemctl status pound.service 
pound.service - Pound Reverse Proxy And Load-balancer 
    Loaded: loaded (/usr/lib/systemd/system/pound.service; enabled) 
    Active: active (running) since Thu 2014-11-06 11:30:12 EST; 6min ago 
    Process: 3019 ExecStart=/usr/sbin/pound (code=exited, status=0/SUCCESS) 
Main PID: 3020 (pound) 
    CGroup: /system.slice/pound.service 
      ├─3020 /usr/sbin/pound 
      └─3021 /usr/sbin/pound 

Nov 06 11:30:12 mymachine systemd[1]: Starting Pound Reverse Proxy And Load-balancer... 
Nov 06 11:30:12 mymachine pound[3019]: starting... 
Nov 06 11:30:12 mymachine systemd[1]: PID file /var/run/pound.pid not readable (yet?) after start. 
Nov 06 11:30:12 mymachine systemd[1]: Started Pound Reverse Proxy And Load-balancer. 
[[email protected] me]# 

[[email protected] me]# netstat -tulpn | grep pound 
tcp  0  0 myip:443  0.0.0.0:*    LISTEN  1379/pound   

我可以wget的HTTP:[堆抱怨链接//]本地主机:80(清漆)和wget HTTP:[堆抱怨链接//]本地主机:8080(阿帕奇)我使用的自签名的pem文件,可以找到(没有错误),然后我会从浏览器中“让我离开”和“我知道我在做什么”,但现在它甚至不会连接到本地主机上的wget 。

这是/etc/pound.cfg:

User "pound" 
Group "pound" 
Control "/var/lib/pound/pound.cfg" 


ListenHTTPS 
    Address 128.199.217.77 
    Port 443 
    Cert "/var/www/html/test.pem" 
     Service 
      BackEnd 
       Address localhost 
       Port 80 
      End 
     End 
End 

回答

0

这是一个iptables的问题。添加规则以使用iptables命令打开端口443,这样做时规则不会以任何方式保存。二手防火墙-cmd选项:

firewall-cmd --permanent --add-service=https 
firewall-cmd --reload 
firewall-cmd --list-services 

当使用wget则不能使用localhost作为磅是不听那里,命令应该是:

[[email protected] me]# wget --no-check-certificate --debug --verbose https://my.ip.address