我可以通过浏览器连接到远程WSS，但可以与WSCAT一起使用

Question

我有一个带有NGINX的反向代理：

server {                                                                                                                                                                                                                                                                                                                                                                                            
   server_name CENSURED;                                                                                                                                                                                                                                                                                                                                                     
   access_log  /var/log/nginx/CENSURED.access.log;                                                                                                                                               
   error_log  /var/log/nginx/CENSURED.error_log;                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
   location / {                                                                                                                                                                                    
      proxy_buffering off;                                                                                                                                                                            
      proxy_request_buffering off;                                                                                                                                                                    
      # redirect all HTTP traffic to localhost:8080                                                                                                                                                   
      proxy_pass http://localhost:9090;                                                                                                                                                               
      proxy_set_header X-Real-IP $remote_addr;                                                                                                                                                        
      proxy_set_header Host $host;                                                                                                                                                                    
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;                                                                                                                                                                                                                                                                                                                                    
      # WebSocket support                                                                                                                                                                             
      proxy_http_version 1.1;                                                                                                                                                                         
      proxy_set_header Upgrade $http_upgrade;                                                                                                                                                         
      proxy_set_header Connection "upgrade";                                                                                                                                                           
      proxy_cache_bypass $http_upgrade;                                                                                                                                                               
      try_files $uri $uri/ =404;                                                                                                                                                                      
      proxy_read_timeout 86400;                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           }                                                                                                                                                                                                                                                                                                                                                                                           
   listen [::]:443 ssl; # managed by Certbot                                                                                                                                                       
   listen 443 ssl; # managed by Certbot                                                                                                                                                            
   ssl_certificate /etc/letsencrypt/live/CENSURED/fullchain.pem; # managed by Certbot                                                                                        
   ssl_certificate_key /etc/letsencrypt/live/CENSURED/privkey.pem; # managed by Certbot                                                                                      
   include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot                                                                                                                           
   ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         }

服务器端是用节点制成的：

var WebSocketServer = require('ws').Server;

var wss = new WebSocketServer({ port: 9090 });

wss.on('connection', function (connection) {

客户端

new WebSocket("ws:"+URL)

我获得了此服务器日志，这似乎是客户端端错误？但是我不知道该如何修复它，

2022/07/04 12:09:19 [crit] 1809447#1809447: *45 SSL_do_handshake() failed (SSL: error:142090BA:SSL routines:tls_early_post_process_client_hello:bad cipher) while SSL handshaking, client: CENSURED, server: 0.0.0.0:443    

我必须在服务器端添加一些东西才能与SSL一起使用吗？但是我已经尝试了很多事情，似乎没有任何效果，这很奇怪

Answer 1

指定ssl_protocols tlsv1.2 tlsv1.3;和默认服务器解决了问题