Chrome 和 Firefox 自动重定向到某个网站上的 https

发布于 2024-11-27 12:43:57 字数 1691 浏览 0 评论 0原文

我有一个在 nginx 和 php-fpm 上运行的 drupal 站点，并在多个服务器之间实现 haproxy 平衡。

我为 haproxy 设置了两个服务：http 和 https。

如果我访问 http://subdomain.domain.com，它工作正常。
如果我访问 https://subdomain.domain.com，它也可以正常工作。如果我然后返回 http，它现在会重定向到 https。这种情况在 Firefox 和 Chrome 中会发生，但在 IE 中不会。

如果某个地方知道它存在，是否有一些设置会自动重定向到 https？也许如果设置了安全标头？

我尝试查看 LiveHTTPHeaders，但此时它仅显示 https 部分。
我尝试在 Chrome 中查找，它说：

t=1312233405229 [st=  0] +REQUEST_ALIVE                             [dt=192]
t=1312233405229 [st=  0]     URL_REQUEST_START_JOB                  [dt=  0]
                             --> load_flags = 1114241 (ENABLE_LOAD_TIMING | MAIN_FRAME | VALIDATE_CACHE | VERIFY_EV_CERT)
                             --> method = "GET"                   
                             --> priority = 0                     
                             --> url = "http://subdomain.domain.com/"   
t=1312233405229 [st=  0]    +URL_REQUEST_START_JOB                  [dt=  0]
                             --> load_flags = 1114241 (ENABLE_LOAD_TIMING | MAIN_FRAME | VALIDATE_CACHE | VERIFY_EV_CERT)
                             --> method = "GET"                   
                             --> priority = 0                     
                             --> url = "http://subdomain.domain.com/"   
t=1312233405229 [st=  0]        URL_REQUEST_REDIRECTED              
                                --> location = "https://subdomain.domain.com/"

它似乎正在执行重定向，但没有说明原因。

我尝试用 Wireshark 进行嗅探，但无法理解它，因为我无法让 SSL 解密工作（我有密钥）。

原文

I have a drupal site that runs on nginx and php-fpm with haproxy balancing between multiple servers.

I have two services set up for haproxy: http and https.

if i go to http://subdomain.domain.com, it works fine.
If I go to https://subdomain.domain.com, it also works fine.
If I then go back to http it now redirects to https. This happens in firefox and chrome, but not in IE.

Is there some setting somewhere that redirects to https automatically if it knows that it exists? Perhaps if a secure header is set?

I tried looking at LiveHTTPHeaders, but it only shows the https portion at this point.
I tried looking in Chrome, and it says this:

t=1312233405229 [st=  0] +REQUEST_ALIVE                             [dt=192]
t=1312233405229 [st=  0]     URL_REQUEST_START_JOB                  [dt=  0]
                             --> load_flags = 1114241 (ENABLE_LOAD_TIMING | MAIN_FRAME | VALIDATE_CACHE | VERIFY_EV_CERT)
                             --> method = "GET"                   
                             --> priority = 0                     
                             --> url = "http://subdomain.domain.com/"   
t=1312233405229 [st=  0]    +URL_REQUEST_START_JOB                  [dt=  0]
                             --> load_flags = 1114241 (ENABLE_LOAD_TIMING | MAIN_FRAME | VALIDATE_CACHE | VERIFY_EV_CERT)
                             --> method = "GET"                   
                             --> priority = 0                     
                             --> url = "http://subdomain.domain.com/"   
t=1312233405229 [st=  0]        URL_REQUEST_REDIRECTED              
                                --> location = "https://subdomain.domain.com/"

It seems to be doing a redirect, but doesn't say why.

I tried sniffing with Wireshark, but wasn't able to make any sense of it, as I can't get the SSL decryption to work (I have the key).

分享到QQ

分享到微博