У нас есть приложение Spring Boot, созданное в настоящее время с версией 2.1.8.RELEASE с облаком Greenwich.SR4, и это приложение может быть доступно через Inte rnet и Intr anet. Чтобы соответствовать некоторым требованиям, нам нужно перейти на Spring Boot 2.2.x. Как часть того же самого, мигрировал на SB 2.2.5 и Cloud Hoxton.SR3 также пытался с Hoxton.RELEASE.
При миграции на SB 2.2.5 приложение может быть доступно через Intr anet, но не через inte rnet. Ниже приведены подробные журналы, снятые с помощью curl.
С Intr anet
$ curl -v https://oauth2-authserver-dev.nonprod.abc.com/api/ie/oauthserver/actuator/health
* Trying 10.223.35.9...
* TCP_NODELAY set
* Connected to oauth2-authserver-dev.nonprod.abc.com (10.223.35.9) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
* subject: C=US; ST=Minnesota; L=Plymouth; O=ABC Group Inc.; CN=oauth2-authserver.stg.svc
* start date: Jun 17 15:36:08 2019 GMT
* expire date: Jun 16 15:36:08 2020 GMT
* subjectAltName: host "oauth2-authserver-dev.nonprod.abc.com" matched cert's "oauth2-authserver-dev.nonprod.abc.com"
* issuer: C=US; ST=Minnesota; L=Minneapolis; O=ABC; CN=ABCInternalIssuingCA2
* SSL certificate verify ok.
> GET /api/ie/oauthserver/actuator/health HTTP/1.1
> Host: oauth2-authserver-dev.nonprod.abc.com
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 200
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< X-Content-Type-Options: nosniff
< X-XSS-Protection: 1; mode=block
< Strict-Transport-Security: max-age=31536000 ; includeSubDomains
< X-Frame-Options: DENY
< Content-Type: application/vnd.spring-boot.actuator.v3+json
< Transfer-Encoding: chunked
< Date: Thu, 09 Apr 2020 17:14:50 GMT
<
* Connection #0 to host oauth2-authserver-dev.nonprod.abc.com left intact
{"status":"UP"}
С Inte rnet (из Внешнего)
~ $ curl -v https://apigw-dev.abc.com/api/ie/oauthserver/actuator/health
* Trying 168.183.43.71...
* TCP_NODELAY set
* Connected to apigw-dev.abc.com (168.183.43.71) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
* CAfile: /etc/ssl/cert.pem
CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server finished (14):
* TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.2 (OUT), TLS change cipher, Client hello (1):
* TLSv1.2 (OUT), TLS handshake, Finished (20):
* TLSv1.2 (IN), TLS change cipher, Client hello (1):
* TLSv1.2 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / AES256-GCM-SHA384
* ALPN, server did not agree to a protocol
* Server certificate:
* subject: C=US; postalCode=55343; ST=Minnesota; L=Minnetonka; street=9900 Bren Road East; O=ABC Group Inc.; OU=ABC Tech ETP & Info Srvcs; CN=apigw-dev.abc.com
* start date: Feb 24 00:00:00 2020 GMT
* expire date: Feb 23 23:59:59 2021 GMT
* subjectAltName: host "apigw-dev.abc.com" matched cert's "apigw-dev.abc.com"
* issuer: C=GB; ST=Greater Manchester; L=Salford; O=COMODO CA Limited; CN=COMODO RSA Organization Validation Secure Server CA
* SSL certificate verify ok.
> GET /api/ie/oauthserver/actuator/health HTTP/1.1
> Host: apigw-dev.abc.com
> User-Agent: curl/7.54.0
> Accept: */*
>
< HTTP/1.1 302
< Content-Length: 0
< Cache-Control: private
< Expires: Thu, 01 Jan 1970 00:00:00 GMT
< Location: https://apigw-dev.abc.com/api/ie/oauthserver/actuator/health
< Date: Thu, 09 Apr 2020 17:09:37 GMT
< X-Kong-Upstream-Latency: 29
< X-Kong-Proxy-Latency: 6
< Via: kong/1.1.2
< Set-Cookie: 086c31780e9921a51376a20749328373=2385c3080d735964e8e509811a8ad7d8; path=/; HttpOnly
< Set-Cookie: BIGipServerapps.nonprod.abc.com_80=327929610.20480.0000; path=/
<
* Connection #0 to host apigw-dev.abc.com left intact
Что-нибудь можно найти из приведенных выше журналов? Пожалуйста, дайте мне знать, если какая-либо другая информация требуется для выявления проблемы.