Windows-Server-2008-R2

升級 apache 2.4 後無法上傳大文件

  • April 3, 2015

我Tomcat 7在上面執行Apache並且正在使用Openssl安全的http。

我的根目錄是 docs：

DocumentRoot "D:/Apache Group/Apache2/docs"

在裡面docs我有一個文件夾upload，我通過我的 Tomcat 應用程序上傳所有文件。

升級到 Apache 2.4 後，我無法再上傳大文件。不過，我可以上傳 .txt、.xml 和 .csv 文件。

作為測試，我取了一個 .txt 文件並將其大小調整為 6.~ KB，它無法上傳，但使其 5.53KB 有效。所以應該是文件大小的問題。

錯誤日誌

[Thu Apr 02 11:23:02.520000 2015] [ssl:debug] [pid 3272:tid 2392] ssl_engine_kernel.c(236): [client 192.111.4.55:64326] AH02034: Subsequent (No.9) HTTPS request received for child 249 (server myserver.com:443), referer: https://myserver.com/da8/jsp/Upload.jsp?Id=85&clear=true
[Thu Apr 02 11:23:02.520000 2015] [authz_core:debug] [pid 3272:tid 2392] mod_authz_core.c(834): [client 192.111.4.55:64326] AH01628: authorization result: granted (no directives), referer: https://myserver.com/da8/jsp/Upload.jsp?Id=85&clear=true
[Thu Apr 02 11:23:18.538000 2015] [ssl:info] [pid 3272:tid 2392] (OS 10060)A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.  : [client 192.111.4.55:64326] AH01991: SSL input filter read failed.
[Thu Apr 02 11:23:18.538000 2015] [ssl:debug] [pid 3272:tid 2392] ssl_engine_io.c(999): [client 192.111.4.55:64326] AH02001: Connection closed to child 249 with standard shutdown (server myserver.com:443)

httpd.conf

ServerRoot "D:/Apache Group/Apache2"

PidFile logs/httpd.pid

ScoreBoardFile logs/apache_runtime_status

Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15

<IfModule mpm_winnt.c>
   ThreadsPerChild 250
   MaxRequestsPerChild  0
   AcceptFilter http none
</IfModule>

ServerSignature off
ServerTokens Prod
SSLInsecureRenegotiation on

Listen 443

LoadModule access_compat_module modules/mod_access_compat.so
LoadModule actions_module modules/mod_actions.so
LoadModule alias_module modules/mod_alias.so
LoadModule allowmethods_module modules/mod_allowmethods.so
LoadModule asis_module modules/mod_asis.so
LoadModule auth_basic_module modules/mod_auth_basic.so
LoadModule authn_core_module modules/mod_authn_core.so
LoadModule authn_file_module modules/mod_authn_file.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule authz_groupfile_module modules/mod_authz_groupfile.so
LoadModule authz_host_module modules/mod_authz_host.so
LoadModule authz_user_module modules/mod_authz_user.so
LoadModule autoindex_module modules/mod_autoindex.so
LoadModule cgi_module modules/mod_cgi.so
LoadModule dir_module modules/mod_dir.so
LoadModule env_module modules/mod_env.so
LoadModule headers_module modules/mod_headers.so
LoadModule include_module modules/mod_include.so
LoadModule isapi_module modules/mod_isapi.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule mime_module modules/mod_mime.so
LoadModule negotiation_module modules/mod_negotiation.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule socache_dbm_module modules/mod_socache_dbm.so
LoadModule setenvif_module modules/mod_setenvif.so
LoadModule ssl_module modules/mod_ssl.so

ServerAdmin admin@email.com
#internal IP address
ServerName 172.18.5.111
DocumentRoot "D:/Apache Group/Apache2/docs"

<Directory />
 Options FollowSymLinks
 AllowOverride None 
 Require all granted   
</Directory>
<Directory "D:/Apache Group/Apache2/docs">
   Options Indexes FollowSymLinks MultiViews
   AllowOverride None    
   Require all granted
</Directory>
<Directory "D:/Apache Group/Apache2/docs/to_be_deleted">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Require all denied
</Directory>
<Directory "D:/Apache Group/Apache2/docs/to_be_deleted/*">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride All
    Require all granted
</Directory>
<Directory "D:/Apache Group/Tomcat/webapps/da8">
   Options Indexes FollowSymLinks
   AllowOverride All
   Require all granted 
</Directory>
<Directory "D:/Apache Group/Tomcat/webapps/da8/*">
   Options Indexes FollowSymLinks
   AllowOverride All
   Require all granted     
</Directory>
<Directory "D:/Apache Group/Apache2/docs/upload funding">
   Options Indexes FollowSymLinks MultiViews
   AllowOverride None
   Require all denied
</Directory>
<Directory "D:/Apache Group/Apache2/docs/upload funding/*">
   Options Indexes FollowSymLinks MultiViews
   AllowOverride All
   Require all granted
</Directory>
<Directory "D:/Apache Group/Tomcat/webapps/da8">  
   Options Indexes FollowSymLinks MultiViews  
   AllowOverride All 
   Require all granted  
</Directory> 
<Directory "D:/Apache Group/Apache2/docs/*">  
   Options Indexes FollowSymLinks MultiViews  
   AllowOverride All 
   Require all granted  
</Directory> 
<Directory "D:/Apache Group/Tomcat/webapps/da8">
   <Files "*.jsp">
   Require all granted 
   </Files>
</Directory>
<Directory "D:/Apache Group/Apache2/docs/upload funding"> 
   Options Indexes FollowSymLinks MultiViews 
   AllowOverride None 
   Require all denied 
</Directory> 
<Directory "D:/Apache Group/Apache2/docs/upload funding"> 
   Options Indexes FollowSymLinks MultiViews 
   AllowOverride All
   Require all granted 
</Directory> 
<Directory "D:/Apache Group/Apache2/docs/pubs"> 
    Options Indexes FollowSymLinks MultiViews 
    AllowOverride None 
    Require all denied 
</Directory>  
<Directory "D:/Apache Group/Apache2/docs/pubs/*"> 
   Options Indexes FollowSymLinks MultiViews 
   AllowOverride All 
   Require all granted 
</Directory> 
<Directory "D:/Apache Group/Apache2/docs/uploadShippingAddressFiles">
   Options Indexes FollowSymLinks MultiViews 
   AllowOverride None 
   Require all denied  
</Directory>    
<Directory "D:/Apache Group/Apache2/docs/uploadShippingAddressFiles/*">  
   Options Indexes FollowSymLinks MultiViews 
   AllowOverride All 
   Require all granted  
</Directory>   


<IfModule mod_userdir.c>
   UserDir "D:/Apache Group/Apache2/users/"
</IfModule>

<IfModule mod_dir.c>
   DirectoryIndex index.html
</IfModule>

AccessFileName .htaccess

<Files ~ "^\.ht">
   Require all denied
   Satisfy All
</Files>

UseCanonicalName Off

<IfModule mod_mime.c>
   TypesConfig conf/mime.types
</IfModule>

#DefaultType text/plain
AddType text/css css

<IfModule mod_mime_magic.c>
   MIMEMagicFile conf/magic
</IfModule>

HostnameLookups Off

ErrorLog logs/error.log

LogLevel debug

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent


ServerSignature On

<IfModule mod_alias.c>

#Labels Alias 
Alias /labels/ "D:/Apache Group/Apache2/docs/Labels/" 
<Directory "D:/Apache Group/Apache2/docs/Labels/"> 
   Options FollowSymlinks MultiViews 
   AllowOverride None
   Require all granted 
</Directory> 

#Upload Alias 
Alias /upload/ "D:/Apache Group/Apache2/docs/upload/" 
<Directory "D:/Apache Group/Apache2/docs/upload/"> 
   Options FollowSymlinks MultiViews 
   AllowOverride All  
   Require all granted 
</Directory> 
<Directory "D:/Apache Group/Apache2/docs/upload/*"> 
   Options Indexes FollowSymlinks MultiViews 
   AllowOverride All
   Require all granted 
</Directory> 

   Alias /icons/ "D:/Apache Group/Apache2/icons/"

   <Directory "D:/Apache Group/Apache2/icons">
       Options Indexes MultiViews
       AllowOverride None
       Require all granted
   </Directory>

   Alias /manual/ "D:/Apache Group/Apache2/htdocs/manual/"

   <Directory "D:/Apache Group/Apache2/htdocs/manual">
       Options Indexes FollowSymlinks MultiViews
       AllowOverride None
       Require all granted
   </Directory>

   ScriptAlias /cgi-bin/ "D:/Apache Group/Apache2/cgi-bin/"

   <Directory "D:/Apache Group/Apache2/cgi-bin">
       AllowOverride None
       Options None
       Require all granted
   </Directory>

</IfModule>

<IfModule mod_autoindex.c>
   AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
   AddIconByType (TXT,/icons/text.gif) text/*
   AddIconByType (IMG,/icons/image2.gif) image/*
   AddIconByType (SND,/icons/sound2.gif) audio/*
   AddIconByType (VID,/icons/movie.gif) video/*
   AddIcon /icons/binary.gif .bin .exe
   AddIcon /icons/binhex.gif .hqx
   AddIcon /icons/tar.gif .tar
   AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
   AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
   AddIcon /icons/a.gif .ps .ai .eps
   AddIcon /icons/layout.gif .html .shtml .htm .pdf
   AddIcon /icons/text.gif .txt
   AddIcon /icons/c.gif .c
   AddIcon /icons/p.gif .pl .py
   AddIcon /icons/f.gif .for
   AddIcon /icons/dvi.gif .dvi
   AddIcon /icons/uuencoded.gif .uu
   AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
   AddIcon /icons/tex.gif .tex
   AddIcon /icons/bomb.gif core
   AddIcon /icons/back.gif ..
   AddIcon /icons/hand.right.gif README
   AddIcon /icons/folder.gif ^^DIRECTORY^^
   AddIcon /icons/blank.gif ^^BLANKICON^^
   DefaultIcon /icons/unknown.gif
   ReadmeName README
   HeaderName HEADER
   IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
</IfModule>

<IfModule mod_mime.c>
   AddEncoding x-compress Z
   AddEncoding x-gzip gz tgz
   AddLanguage da .dk
   AddLanguage nl .nl
   AddLanguage en .en
   AddLanguage et .ee
   AddLanguage fr .fr
   AddLanguage de .de
   AddLanguage el .el
   AddLanguage he .he
   AddCharset ISO-8859-8 .iso8859-8
   AddLanguage it .it
   AddLanguage ja .ja
   AddCharset ISO-2022-JP .jis
   AddLanguage kr .kr
   AddCharset ISO-2022-KR .iso-kr
   AddLanguage nn .nn
   AddLanguage no .no
   AddLanguage pl .po
   AddCharset ISO-8859-2 .iso-pl
   AddLanguage pt .pt
   AddLanguage pt-br .pt-br
   AddLanguage ltz .lu
   AddLanguage ca .ca
   AddLanguage es .es
   AddLanguage sv .sv
   AddLanguage cz .cz
   AddLanguage ru .ru
   AddLanguage tw .tw
   AddLanguage zh-tw .tw
   AddCharset Big5         .Big5    .big5
   AddCharset WINDOWS-1251 .cp-1251
   AddCharset CP866        .cp866
   AddCharset ISO-8859-5   .iso-ru
   AddCharset KOI8-R       .koi8-r
   AddCharset UCS-2        .ucs2
   AddCharset UCS-4        .ucs4
   AddCharset UTF-8        .utf8

   <IfModule mod_negotiation.c>
       LanguagePriority en da nl et fr de el it ja kr no pl pt pt-br ru ltz ca es sv tw
   </IfModule>
   AddType application/x-tar .tgz
</IfModule>

<IfModule mod_setenvif.c>
   BrowserMatch "Mozilla/2" nokeepalive
   BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
   BrowserMatch "RealPlayer 4\.0" force-response-1.0
   BrowserMatch "Java/1\.0" force-response-1.0
   BrowserMatch "JDK/1\.0" force-response-1.0
</IfModule>

RewriteEngine On 
RewriteCond %{REQUEST_METHOD} ^TRACE 
RewriteRule .* - [F] 

TraceEnable off

Include "D:/Apache Group/Apache2/conf/httpd-jk.conf"

Mutex default ssl-cache
SSLRandomSeed startup builtin 
SSLSessionCache dbm:logs/ssl_gcache_data
SSLSessionCacheTimeout 300

SSLCipherSuite HIGH:MEDIUM
SSLProtocol all -SSLv2 -SSLv3 
SSLCipherSuite ALL:!ADH:!EXPORT56:!RC4+RSA:+HIGH:!MEDIUM:!LOW:!SSLv2:!EXP

<VirtualHost *:80>
   <IfModule mod_rewrite.c>
       RewriteEngine on
       RewriteRule ^/(.*)$  https://%{SERVER_NAME}
   </IfModule>
</VirtualHost>

<IfModule mod_headers.c>
 Header set Cache-Control "public"
 Header set X-Frame-Options SAMEORIGIN
</IfModule>

<VirtualHost _default_:443>
ServerName myserver.com
   # HTTP Strict Transport Security (often abbreviated as HSTS) is a security
   # feature that lets a web site tell browsers that it should only be communicated
   # with using HTTPS, instead of using HTTP
   Header set Strict-Transport-Security "max-age=31536000; includeSubDomains"

   DocumentRoot "D:/Apache Group/Apache2/docs"
   SSLEngine On 
   SetEnvIf User-Agent ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0

   SSLCertificateFile conf/ssl/certificate.crt
   SSLCertificateKeyFile conf/ssl/certificate.key
   SSLCACertificateFile  conf/ssl.crt/cabundle.crt 

   <Location /da8/pki>
       SSLVerifyClient require  
       SSLVerifyDepth 10 
       #SSLCACertificateFile  conf/ssl.crt/cabundle.crt 
       SSLOptions +StdEnvVars +ExportCertData 
   </Location> 

   JkExtractSSL On
   JkHTTPSIndicator HTTPS
   JkSESSIONIndicator SSL_SESSION_ID
   JkCIPHERIndicator SSL_CIPHER
   JkCERTSIndicator SSL_CLIENT_CERT
   JkEnvVar SSL_CLIENT_CERT SSL_CLIENT_CERT
   JkEnvVar SSL_CLIENT_CERT_CHAIN_0 SSL_CLIENT_CERT_CHAIN_0
   JKOptions +ForwardSSLCertChain

   JKMount /*.jsp dol
   JKMount /*.jsf dol
   JKMount /da8/faces/* dol
   JKMount /servlet/* dol
   JKMount /da8/servlet/* dol
   JKMount /jasperserver/* report
   SSLInsecureRenegotiation on
</VirtualHost>

有誰知道這可能與什麼有關？

我想到了。

它是 Apache-Tomcat 連接器：AJP 1.3

在我添加 packetSize 之後，它起作用了。

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" packetSize="65536" />

引用自：https://serverfault.com/questions/680104

相關問答

Ssl

如何從 JKS 文件為 httpd apache 伺服器生成 .key 和 .crt 文件

  • November 8, 2021
檢視問答
Windows-Server-2008-R2

如何從 Red Hat 向 Windows CA 送出證書請求？

  • August 5, 2021
檢視問答
Windows-Server-2008-R2

阿帕奇錯誤 0xc000007b

  • November 28, 2020
檢視問答
Ssl

檢查本地 apache 虛擬主機使用的 SSL 證書

  • August 18, 2020
檢視問答
Windows-Server-2008

如何修復 Solr - 伺服器正在關閉問題？

  • April 1, 2020
檢視問答
Windows

連接被拒絕 HTTPS 443 localhost

  • March 20, 2020
檢視問答