MirtoBusico opened a new issue, #10016:
URL: https://github.com/apache/apisix/issues/10016

   ### Description
   
   When I access an HTTPS route (in my example it is the bookinfo istio demo 
application) I receive in the browser the correct page but without any other 
element (css, icon, javascript...).
   
   ### the error log
   
   ```
   2023/08/13 17:34:42 [error] 49#49: *5083759 lua entry thread aborted: 
runtime error: /usr/local/apisix/apisix/init.lua:332: attempt to index local 
'matched_ssl' (a nil value)
   stack traceback:
   coroutine 0:
    /usr/local/apisix/apisix/init.lua: in function 'verify_https_client'
    /usr/local/apisix/apisix/init.lua:560: in function 'http_access_phase'
    access_by_lua(nginx.conf:412):2: in main chunk, client: 127.0.0.6, server: 
_, request: "GET /static/bootstrap/css/bootstrap-theme.min.css HTTP/1.0", host: 
"h2serv.h.net", referrer: "https://h2serv.h.net/";
   2023/08/13 17:34:42 [error] 52#52: *5083760 lua entry thread aborted: 
runtime error: /usr/local/apisix/apisix/init.lua:332: attempt to index local 
'matched_ssl' (a nil value)
   stack traceback:
   coroutine 0:
    /usr/local/apisix/apisix/init.lua: in function 'verify_https_client'
    /usr/local/apisix/apisix/init.lua:560: in function 'http_access_phase'
    access_by_lua(nginx.conf:412):2: in main chunk, client: 127.0.0.6, server: 
_, request: "GET /static/bootstrap/css/bootstrap.min.css HTTP/1.0", host: 
"h2serv.h.net", referrer: "https://h2serv.h.net/";
   2023/08/13 17:34:42 [error] 52#52: *5083763 lua entry thread aborted: 
runtime error: /usr/local/apisix/apisix/init.lua:332: attempt to index local 
'matched_ssl' (a nil value)
   stack traceback:
   coroutine 0:
    /usr/local/apisix/apisix/init.lua: in function 'verify_https_client'
    /usr/local/apisix/apisix/init.lua:560: in function 'http_access_phase'
    access_by_lua(nginx.conf:412):2: in main chunk, client: 127.0.0.6, server: 
_, request: "GET /static/jquery.min.js HTTP/1.0", host: "h2serv.h.net", 
referrer: "https://h2serv.h.net/";
   2023/08/13 17:34:42 [error] 52#52: *5083764 lua entry thread aborted: 
runtime error: /usr/local/apisix/apisix/init.lua:332: attempt to index local 
'matched_ssl' (a nil value)
   stack traceback:
   coroutine 0:
    /usr/local/apisix/apisix/init.lua: in function 'verify_https_client'
    /usr/local/apisix/apisix/init.lua:560: in function 'http_access_phase'
    access_by_lua(nginx.conf:412):2: in main chunk, client: 127.0.0.6, server: 
_, request: "GET /static/bootstrap/js/bootstrap.min.js HTTP/1.0", host: 
"h2serv.h.net", referrer: "https://h2serv.h.net/";
   2023/08/13 17:34:42 [error] 49#49: *5083775 lua entry thread aborted: 
runtime error: /usr/local/apisix/apisix/init.lua:332: attempt to index local 
'matched_ssl' (a nil value)
   stack traceback:
   coroutine 0:
    /usr/local/apisix/apisix/init.lua: in function 'verify_https_client'
    /usr/local/apisix/apisix/init.lua:560: in function 'http_access_phase'
    access_by_lua(nginx.conf:412):2: in main chunk, client: 127.0.0.6, server: 
_, request: "GET /favicon.ico HTTP/1.0", host: "h2serv.h.net", referrer: 
"https://h2serv.h.net/";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET / HTTP/1.0" 200 
1683 0.005 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like 
Gecko) Chrome/115.0.0.0 Safari/537.36" 10.43.225.130:9080 200 0.004 
"http://h2serv.h.net";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET 
/static/bootstrap/css/bootstrap-theme.min.css HTTP/1.0" 500 651 0.000 
"https://h2serv.h.net/"; "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 
(KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" - - - "http://h2serv.h.net";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET /favicon.ico 
HTTP/1.0" 500 651 0.000 "https://h2serv.h.net/"; "Mozilla/5.0 (X11; Linux 
x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 
- - - "http://h2serv.h.net";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET 
/static/bootstrap/css/bootstrap.min.css HTTP/1.0" 500 651 0.000 
"https://h2serv.h.net/"; "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 
(KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" - - - "http://h2serv.h.net";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET 
/static/jquery.min.js HTTP/1.0" 500 651 0.000 "https://h2serv.h.net/"; 
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) 
Chrome/115.0.0.0 Safari/537.36" - - - "http://h2serv.h.net";
   127.0.0.6 - - [13/Aug/2023:17:34:42 +0000] h2serv.h.net "GET 
/static/bootstrap/js/bootstrap.min.js HTTP/1.0" 500 651 0.000 
"https://h2serv.h.net/"; "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 
(KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" - - - "http://h2serv.h.net";
   ```
   
   ### The SNI definition
   
   ```
   sysop@h2dev:~$ curl 
http://localhost:8001/api/v1/namespaces/apisix/services/apisix-admin:9180/proxy/apisix/admin/ssls/2000
 -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' | jq
     % Total    % Received % Xferd  Average Speed   Time    Time     Time  
Current
                                    Dload  Upload   Total   Spent    Left  Speed
   100  1708    0  1708    0     0  81636      0 --:--:-- --:--:-- --:--:-- 
85400
   {
     "value": {
       "update_time": 1691923113,
       "snis": [
         "h2serv.h.net"
       ],
       "id": "2000",
       "status": 1,
       "cert": "-----BEGIN 
CERTIFICATE-----\nMIIEHDCCAwSgAwIBAgIUMSR6Br4CgtAhsqO0vQYLN9cU73EwDQYJKoZIhvcNAQEL\nBQAwgZUxCzAJBgNVBAYTAklUMQ4wDAYDVQQIDAVJdGFseTENMAsGA1UEBwwEUm9t\nZTEVMBMGA1UECgwMQnVzaWNvIE1pcnRvMRMwEQYDVQQLDApMYWJvcmF0b3J5MRUw\nEwYDVQQDDAxCdXNpY28gTWlydG8xJDAiBgkqhkiG9w0BCQEWFW1pcnRvYnVzaWNv\nQGdtYWlsLmNvbTAeFw0yMzA3MzAwNzI5MjRaFw0zMzA3MjcwNzI5MjRaMG8xCzAJ\nBgNVBAYTAklUMQ4wDAYDVQQIDAVJdGFseTENMAsGA1UEBwwEUm9tZTEVMBMGA1UE\nCgwMQnVzaWNvIE1pcnRvMRMwEQYDVQQLDApMYWJvcmF0b3J5MRUwEwYDVQQDDAxo\nMnNlcnYuaC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzFAC\n8Czne3SJ0w6uksvX7b+05BDPGAtBvr/DMdB2ve2g71GDmW7Pn3hTHs+i2yBBEPo+\n1fOtkFGy4POM3Eznc8EWV7M+YvX8aXMFeVT3wZbD33PjuYlkWuRmsfxDRsoGnd0n\n9uJ5aixf2vKu3KlrsJffA2r4TRYSUc5q7PfXg+WaMisG5B3J/FQJCivyCcmkRraU\nGOucJi9cnD0zT2iTECI0eAS+iCSc9wdZEa7/3UXxLSpYuQ/2U5mg40lxP+n5GfTU\nAuJuZt7L5TCszp7El2kqIUsqoG3eoN8vJgF5OF+xgSeTBf4f7zwOZkoW/XAJWDcf\nIzNwaHOnD9gQaJspAgMBAAGjgYgwgYUwQwYDVR0RBDwwOoIGaDJzZXJ2ggxoMnNl\ncnYuaC5uZXSCEGgyc2Vydi5leHQua
 
C5uZXSCEGgyc2Vydi5pbnQuaC5uZXQwHQYD\nVR0OBBYEFKAd4CfThRk9JTFxHL/VQubJyZ9wMB8GA1UdIwQYMBaAFGxvsvMWa32s\ntsU7Axh5kFe5wAmaMA0GCSqGSIb3DQEBCwUAA4IBAQCLFkdwJVVy6vPt+qnaYMlK\ncXgmddwZspaPyd0bCt/Uhstzxgmw1ZbKKc9Nb2qf4l2jkyAj2JirkX686/3mdKKW\nkpF+YEo247zgtQLaMGUJ8ngriZf34sAAxx3FVdClBXxBHaI5sqCFZt59UZFXUAvw\n9f3jPmuDUgACHsy4+uUql75iEFeH5p5wFIcPCURx2y/4jGtECIrMDZWCidmddObi\nEQyNUvBOL7+ibfuCgWQ3ZuZ2PCh4wLJo2vE3wgCQBtaA3+WvgX4/1viW3hpVLvYT\nt6IaR5BHuiv3uboMWe8JQAEUJgYYEh1LkIbapHPFSpe5iqtH88uVf4bIgdNH/DFm\n-----END
 CERTIFICATE-----\n",
       "create_time": 1691923113,
       "type": "server"
     },
     "createdIndex": 114,
     "key": "/apisix/ssls/2000",
     "modifiedIndex": 114
   }
   sysop@h2dev:~$ 
   ```
   
   ### The upstream
   
   ```
   sysop@h2dev:~$ curl 
http://localhost:8001/api/v1/namespaces/apisix/services/apisix-admin:9180/proxy/apisix/admin/upstreams/2000
 -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' | jq
     % Total    % Received % Xferd  Average Speed   Time    Time     Time  
Current
                                    Dload  Upload   Total   Spent    Left  Speed
   100   427    0   427    0     0  28588      0 --:--:-- --:--:-- --:--:-- 
30500
   {
     "value": {
       "timeout": {
         "connect": 6,
         "send": 6,
         "read": 6
       },
       "keepalive_pool": {
         "idle_timeout": 60,
         "requests": 1000,
         "size": 320
       },
       "pass_host": "pass",
       "hash_on": "vars",
       "discovery_type": "dns",
       "update_time": 1691944127,
       "name": "productpage",
       "id": "2000",
       "service_name": "productpage.bookinfo.svc.cluster.local:9080",
       "scheme": "http",
       "create_time": 1691944109,
       "type": "roundrobin"
     },
     "createdIndex": 115,
     "key": "/apisix/upstreams/2000",
     "modifiedIndex": 116
   }
   sysop@h2dev:~$ 
   ```
   
   ### The route
   
   ```
   sysop@h2dev:~$ curl 
http://localhost:8001/api/v1/namespaces/apisix/services/apisix-admin:9180/proxy/apisix/admin/routes/2000
 -H 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' | jq
     % Total    % Received % Xferd  Average Speed   Time    Time     Time  
Current
                                    Dload  Upload   Total   Spent    Left  Speed
   100   470    0   470    0     0  32116      0 --:--:-- --:--:-- --:--:-- 
33571
   {
     "value": {
       "desc": "h2serv.h.net primary route",
       "upstream_id": "2000",
       "host": "h2serv.h.net",
       "plugins": {
         "redirect": {
           "ret_code": 302,
           "encode_uri": false,
           "http_to_https": true,
           "append_query_string": false
         }
       },
       "update_time": 1691944589,
       "id": "2000",
       "status": 1,
       "name": "h2serv",
       "methods": [
         "GET",
         "POST",
         "PUT",
         "DELETE",
         "PATCH",
         "HEAD",
         "OPTIONS",
         "CONNECT",
         "TRACE",
         "PURGE"
       ],
       "priority": 0,
       "create_time": 1691944589,
       "uri": "/*"
     },
     "createdIndex": 119,
     "key": "/apisix/routes/2000",
     "modifiedIndex": 119
   }
   sysop@h2dev:~$ 
   ```
   
   What I'm doing wrong?
   
   
   
   
   ### Environment
   
   - APISIX version (run `apisix version`): 3.4.0
   - Operating system (run `uname -a`): Linux apisix-67f5f65695-dpz4p 
6.1.0-10-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.38-2 (2023-07-27) x86_64 
GNU/Linux
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`): nginx 
version: openresty/1.21.4.1
   - etcd version, if relevant (run `curl 
http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to