[SOLVED] fresh install "Handshake failed"

[mircsicz]

Hi hi,

I've just installed the enterprise eval version 3.3.2. First thing I did was upgrading to 3.3.3, after the upgrade I see the following error in the console:

ERROR 2018-03-08T13:31:10,706 (org.springframework.web.socket.server.support.AbstractHandshakeHandler.handleInvalidUpgradeHeader:285) - Handshake failed due to invalid Upgrade header: null

What happend, do I need to take any actions beside a "ma.sh restart"?

EDIT: A "ma.sh restart" doesn't solve the problem

[mircsicz]

Seems it was an issue with my NginX Proxy. This is the setup that works now:

server {
        listen          80;
        server_name  XXX.mydomain.de;
        return 301 https://$host$request_uri;
}

server {
        listen          443 ssl;
        server_name  XXX.mydomain.de;
        client_max_body_size 16M;

        ssl                     on;
        ssl_protocols           TLSv1.2;
        ssl_certificate         /etc/nginx/ssl/mydomain.de-bundle.crt;
        ssl_certificate_key     /etc/nginx/ssl/mydomain.de.key;

        proxy_cache off;
        proxy_store off;

        location / {
                proxy_set_header Referer "";
                proxy_pass http://10.xx.x.70:8080;
#               proxy_redirect          off;
                proxy_redirect          http://10.xx.x.70:8080 https://XXX.mydomain.de;
                proxy_set_header        Host                    $host;
                proxy_set_header        X-Real-IP               $remote_addr;
                proxy_set_header        X-Forwarded-Host        $host;
                proxy_set_header        X-Forwarded-Server      $host;
                proxy_set_header        X-Forwarded-For         $proxy_add_x_forwarded_for;
        }
}

[Jared Wiltshire]

Yep you have to be careful with proxies and websockets. That message is about a failed HTTP -> websocket upgrade. This is one of many reasons we recommend running HTTPS when using Mango over the internet.

[mircsicz]

That's why I'm proxying it, it's my lazy men's way to get it on HTTPS ;-)