Nginx Wordpress Ms Edge error render page

Please fill in any relevant information that applies to you:

• CentOS Version: CentOS 7.3 64bit
• Centmin Mod Version Installed: 123.09beta01
• Nginx Version Installed: 1.13.8
• PHP Version Installed: i.e. 7.1.13
• MariaDB MySQL Version Installed: 10.0.21
• When was last time updated Centmin Mod code base ? : yesterday
• Persistent Config:

Code:

LETSENCRYPT_DETECT='y'
NGINX_DYNAMICTLS='y'
#CLOUDFLARE_ZLIB='y'
NGINX_HPACK='y'
OPENSSL_VERSION='1.1.0g'
LIBRESSL_SWITCH='n'


OPENSSLECDSA_PATCH='y'
OPENSSLECDHX_PATCH='y'
NGINX_IPV='y'


NGINX_STREAM=n               # http://nginx.org/en/docs/stream/ngx_stream_core_module.html
NGINX_RTMP=n                 # Nginx RTMP Module support https://github.com/arut/nginx-rtmp-module
NGINX_FLV=n                  # http://nginx.org/en/docs/http/ngx_http_flv_module.html
NGINX_MP4=n                  # Nginx MP4 Module http://nginx.org/en/docs/http/ngx_http_mp4_module.html
NGINX_AUTHREQ=n              # http://nginx.org/en/docs/http/ngx_http_auth_request_module.html
NGINX_SECURELINK=y           # http://nginx.org/en/docs/http/ngx_http_secure_link_module.html
NGINX_FANCYINDEX=n           # http://wiki.nginx.org/NgxFancyIndex
NGINX_VHOSTSTATS=n           # https://github.com/vozlt/nginx-module-vts
NGINX_PAGESPEED=n            # Install ngx_pagespeed
NGINX_PASSENGER='n'          # Install Phusion Passenger requires installing addons/passenger.sh before hand
NGINX_WEBDAV=n               # Nginx WebDAV and nginx-dav-ext-module
NGINX_UPSTREAMCHECK='n'      # nginx upstream check https://github.com/yaoweibin/nginx_upstream_check_module
NGINX_OPENRESTY='n'            # Agentzh's openresty Nginx modules
LUAJIT_GITINSTALL='n'        # opt to install luajit 2.1 from dev branch http://repo.or.cz/w/luajit-2.0.git/shortlog/refs/heads/v2.1
ORESTY_LUANGINX='n'             # enable or disable or ORESTY_LUA* nginx modules below



#Php Custom
PHP_PGO='y'
PHP_VERSION='7.1.13'
GCCINTEL_PHP='y'

---

When I visit one of my sites hosted with Centminmod using Microsoft Edge the sites do not load the JS and the css, so they see badly.

• Example

• note that many files needed to render the page are not loaded or remain in stand-by.

you can try disdette.pro or samsungmobile.it

These sites have been installed with option 22 and redis cache, but it does so on ALL the sites on this dedicated server with both redis / or cache enabler.

If I use cloudflare, they work. Currently I use cloudflare only in dns mode.
PS: I do not use brotli ever configured.
Server configured 7 days ago.

Thanks for those who can help me

 

Hi George and thank you.

All hosts are created with option 22.
All are created with let's encrypt certificate, no self signed.

I tried to comment on the drop.conf> nprestart> clear the redis caches but it does not change anything.
The "block.conf" is not present.

Here's what you asked me:

Code (Text):

#x# HTTPS-DEFAULT
 server {

   server_name disdette.pro [URL='http://www.disdette.pro;']www.disdette.pro;[/URL]
   return 301 [URL]https://disdette.pro$request_uri;[/URL]
   include /usr/local/nginx/conf/staticfiles.conf;
 }

server {
  listen 443 ssl http2;
  server_name disdette.pro [URL='http://www.disdette.pro;']www.disdette.pro;[/URL]

  include /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro.crt.key.conf;
  include /usr/local/nginx/conf/ssl_include.conf;

  http2_max_field_size 16k;
  http2_max_header_size 32k;
  # mozilla recommended
  ssl_ciphers ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA$
  ssl_prefer_server_ciphers   on;
  #add_header Alternate-Protocol  443:npn-spdy/3;

  # before enabling HSTS line below read centminmod.com/nginx_domain_dns_setup.html#hsts
  #add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;
  #spdy_headers_comp 5;
  ssl_buffer_size 1369;
  ssl_session_tickets on;

  # enable ocsp stapling
  resolver 8.8.8.8 8.8.4.4 valid=10m;
  resolver_timeout 10s;
  ssl_stapling on;
  ssl_stapling_verify on;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;

  # limit_conn limit_per_ip 16;
  # ssi  on;

  #access_log /home/nginx/domains/disdette.pro/log/access.log combined buffer=256k flush=5m;
  error_log /home/nginx/domains/disdette.pro/log/error.log;
  access_log off;

  include /usr/local/nginx/conf/autoprotect/disdette.pro/autoprotect-disdette.pro.conf;
  root /home/nginx/domains/disdette.pro/public;
  # uncomment cloudflare.conf include if using cloudflare for
  # server and/or vhost site
  #include /usr/local/nginx/conf/cloudflare.conf;
  include /usr/local/nginx/conf/503include-main.conf;
#include /usr/local/nginx/conf/wpincludes/disdette.pro/wpcacheenabler_disdette.pro.conf;
  #include /usr/local/nginx/conf/wpincludes/disdette.pro/wpsupercache_disdette.pro.conf;
  # [URL='https://community.centminmod.com/posts/18828/']Upgrade - Nginx - Redis - Insight Guide - How to install Redis server on Centmin Mod LEMP stack[/URL]
  include /usr/local/nginx/conf/wpincludes/disdette.pro/rediscache_disdette.pro.conf;

  location / {
  include /usr/local/nginx/conf/503include-only.conf;


  # Enables directory listings when index file not found
  #autoindex  on;

  # for wordpress super cache plugin
  #try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?q=$uri&$args;

  # for wp cache enabler plugin
  #try_files $cache_enabler_uri $uri $uri/ $custom_subdir/index.php?$args;

  # Wordpress Permalinks
  #try_files $uri $uri/ /index.php?q=$uri&$args;

  # Nginx level redis Wordpress
  # [URL='https://community.centminmod.com/posts/18828/']Upgrade - Nginx - Redis - Insight Guide - How to install Redis server on Centmin Mod LEMP stack[/URL]
  try_files $uri $uri/ /index.php?$args;

  }

location ~* /(wp-login\.php) {
    limit_req zone=xwplogin burst=1 nodelay;
    #limit_conn xwpconlimit 30;
    auth_basic "Private";
    auth_basic_user_file /home/nginx/domains/disdette.pro/htpasswd_wplogin;
    #include /usr/local/nginx/conf/php-wpsc.conf;

    # [URL='https://community.centminmod.com/posts/18828/']Upgrade - Nginx - Redis - Insight Guide - How to install Redis server on Centmin Mod LEMP stack[/URL]
    include /usr/local/nginx/conf/php-rediscache.conf;
}

location ~* /(xmlrpc\.php) {
    limit_req zone=xwprpc burst=45 nodelay;
    #limit_conn xwpconlimit 30;
    #include /usr/local/nginx/conf/php-wpsc.conf;

    # [URL='https://community.centminmod.com/posts/18828/']Upgrade - Nginx - Redis - Insight Guide - How to install Redis server on Centmin Mod LEMP stack[/URL]
    include /usr/local/nginx/conf/php-rediscache.conf;
}

  include /usr/local/nginx/conf/wpincludes/disdette.pro/wpsecure_disdette.pro.conf;
  #include /usr/local/nginx/conf/php-wpsc.conf;

  # [URL='https://community.centminmod.com/posts/18828/']Upgrade - Nginx - Redis - Insight Guide - How to install Redis server on Centmin Mod LEMP stack[/URL]
  include /usr/local/nginx/conf/php-rediscache.conf;
  include /usr/local/nginx/conf/pre-staticfiles-local-disdette.pro.conf;
  include /usr/local/nginx/conf/pre-staticfiles-global.conf;
  include /usr/local/nginx/conf/staticfiles.conf;
  include /usr/local/nginx/conf/drop.conf;
  #include /usr/local/nginx/conf/errorpage.conf;
  include /usr/local/nginx/conf/vts_server.conf;
}

Code (Text):

vhost ssl for disdette.pro created successfully

domain: [URL='https://disdette.pro']Disdette.PRO[/URL]
vhost ssl conf file for disdette.pro created: /usr/local/nginx/conf/conf.d/disdette.pro.ssl.conf
/usr/local/nginx/conf/ssl_include.conf created
Self-signed SSL Certificate: /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro.crt
SSL Private Key: /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro.key
SSL CSR File: /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro.csr
Backup SSL Private Key: /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro-backup.key
Backup SSL CSR File: /usr/local/nginx/conf/ssl/disdette.pro/disdette.pro-backup.csr

upload files to /home/nginx/domains/disdette.pro/public
vhost log files directory is /home/nginx/domains/disdette.pro/log

------------------------------------------------------------
SSH commands to uninstall created Wordpress install and Nginx vhost:
  /root/tools/wp_uninstall_disdette.pro.sh
------------------------------------------------------------

------------------------------------------------------------
Wordpress Auto Updater created at:
  /root/tools/wp_updater_disdette.pro.sh
cronjob set for every 8 hours update (3x times per day

------------------------------

moreover, in the erroneous log of this domain I see strange things.
there are requests related to a domain always on this server of an old site. Androidtech DNS now points to this centmin server but I have not transferred any files yet. Why report errors in the disdette.pro log?

Code (Text):

2018/01/20 02:33:43 [error] 952#952: *1020 open() "/home/nginx/domains/disdette.pro/public/wp-content/uploads/2013/09/2013-09-15-2.jpg" failed (2: No such file or directory), client: 54.36.148.191, server: disdette.pro, request: "GET /wp-content/uploads/2013/09/2013-09-15-2.jpg HTTP/1.1", host: "androidtech.it"

Code (Text):

curl -I [URL='https://disdette.pro']Disdette.PRO[/URL]
HTTP/1.1 200 OK
Date: Sat, 20 Jan 2018 01:46:19 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Vary: Accept-Encoding
Link: <[URL]https://disdette.pro/wp-json/[/URL]>; rel="[URL='https://api.w.org/']REST API Handbook | WordPress Developer Resources[/URL]"
Server: nginx centminmod
X-Powered-By: centminmod
X-Cache: MISS
X-Cache-2: BYPASS

Code (Text):

curl -I [URL='https://www.disdette.pro']Disdette.PRO[/URL]
HTTP/1.1 301 Moved Permanently
Date: Sat, 20 Jan 2018 01:47:05 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Location: [URL='https://disdette.pro/']Disdette.PRO[/URL]
Server: nginx centminmod
X-Powered-By: centminmod
X-Cache: MISS
X-Cache-2: BYPASS

Code (Text):

curl -I [URL='http://www.disdette.pro']Disdette.PRO[/URL]
HTTP/1.1 301 Moved Permanently
Date: Sat, 20 Jan 2018 01:47:35 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: [URL='https://disdette.pro/']Disdette.PRO[/URL]
Server: nginx centminmod
X-Powered-By: centminmod

Code (Text):

curl -I http://disdette.pro
HTTP/1.1 301 Moved Permanently
Date: Sat, 20 Jan 2018 01:47:52 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://disdette.pro/
Server: nginx centminmod
X-Powered-By: centminmod

I hope it's all

 

Hi, it's the first time I use centminmod on a new dedicated server.

Online from 7 days, I was migrating some of my sites and trying out with edge I found this problem.

Could it be Hpack?

I have a domain on this dedicated that is running on cloudflare free without special configurations or rules. on edge works.

I would not at this point be an error with the ssl certificate and any patches that I inserted before recompiling nginx

another strange thing is the TTFB made by frankfurt, the server is relatively close 50km "hetzner".

WebPagetest Test Result - Frankfurt : disdette.pro - 01/20/18 01:33:10


On a virtually empty site it results on the .300ms.

Mysteries

 

Sorry for my mistake of not having directly tested the https version.

it's also true that the https version is poor given the proximity of the server to frankfurt.

I do not know what to say is a dedicated with nvme disks and practically a load at 0.
I installed the DynamicTLS Nginx patch but did not do much. .
Xeon® E3-1275 v6 64GB

what do you say I try to remove these two for the edge problem?
OPENSSLECDSA_PATCH = 'y'
OPENSSLECDHX_PATCH = 'y'

Code (Text):

cat /usr/local/nginx/conf/autoprotect/samsungmobile.it/autoprotect-samsungmobile.it.conf
# /home/nginx/domains/samsungmobile.it/public/wp-content/plugins/wp-external-links/includes
location ~* ^/wp-content/plugins/wp-external-links/includes/ { allow 127.0.0.1; deny all; }
# /home/nginx/domains/samsungmobile.it/public/wp-content/plugins/akismet

location /wp-content/plugins/akismet/ {
  location ~ ^/wp-content/plugins/akismet/(.+/)?(form|akismet)\.(css|js)$ { allow all; expires 30d;}
  location ~ ^/wp-content/plugins/akismet/(.+/)?(.+)\.(png|gif)$ { allow all; expires 30d;}
  location ~* /wp-content/plugins/akismet/.*\.php$ {
    include /usr/local/nginx/conf/php.conf;
    allow 127.0.0.1;
    deny all;
  }
}

 

little bit better now
WebPagetest Test Result - Frankfurt : disdette.pro - 01/20/18 02:42:25

anyway
use dns of cloudflare maybe they are slow because the tested site is active recently and nobody knows it.

trying a site with a lot of traffic and on dns ovh anycast gives me 84ms as you think it is worth?

 

I think I have solved with EDGE I have recompiled nginx without Hpack and the sites work regularly.

But now how is this possible?


is this config correct for the use of hpack?

Code (Text):

NGINX_DYNAMICTLS = 'y'
CLOUDFLARE_ZLIB = 'n'
NGINX_HPACK = 'Y'
OPENSSL_VERSION = '1.1.0g'
LIBRESSL_SWITCH = 'n'


OPENSSLECDSA_PATCH = 'Y'
OPENSSLECDHX_PATCH = 'Y'
NGINX_IPV = 'y'

 

solved with ms edge browser.

in file log: nginx_autoconf.err.xxxx there is NO error:

 

No, any error .

 

Hi I think I found the bug that happens on edge and safari.
https://github.com/cloudflare/sslconfig/issues/83
This user has solved it on the same version of nginx that I use, the 1.13.8
I have reinstalled Centmin with hpack on a new VM same exact problem so the error is reproducible.

@eva2000 , do you think we can solve it?