Akeneo CE 6.0.108登录后图片无法加载（含NS_ERROR_DOM_BAD_URI等错误）

登录Akeneo CE 6.0.108后页面图片无法正常显示，此前未添加SSL证书及配置Nginx跳转时图片可正常加载。

错误截图 #

当前Nginx sites-available配置 #

server {
        listen       80;
        listen   [::]:80;
        server_name 192.168.0.78;

        return 301 https://192.168.0.78$request_uri;
}
server {
        listen 443 ssl http2;
        server_name 192.168.0.78;

        access_log /var/log/nginx/akeneo.prod-access.log;
        error_log /var/log/nginx/akeneo.prod-error.log;

        ssl_certificate         /etc/nginx/ssl/crt.pem;
        ssl_certificate_key     /etc/nginx/ssl/private.key;
        ssl_trusted_certificate /etc/nginx/ssl/crt.pem;

        ssl_session_cache shared:SSL:50m;
        ssl_session_timeout 5m;
        ssl_stapling on;
        ssl_stapling_verify on;

        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";

        location / {
        proxy_pass  http://127.0.0.1:8080$request_uri;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header Host $host;
        proxy_set_header X-Scheme https;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Port 443;
        proxy_set_header X-Secure on;
        proxy_set_header Accept-Encoding "";
        proxy_set_header Connection "";
        proxy_http_version 1.1;
        proxy_read_timeout 7200s;
        proxy_send_timeout 7200s;
    }
}

可能的原因 #

• Akeneo资源地址未更新为HTTPS：开启SSL后，Akeneo可能仍生成HTTP协议的资源链接，浏览器因混合内容拦截规则（HTTPS页面禁止加载HTTP资源）导致图片无法显示。需检查系统配置，将asset_url、base_url等参数设置为HTTPS地址。
• Akeneo信任代理配置缺失：即使Nginx传递了X-Forwarded-Proto等头信息，若Akeneo未将Nginx服务器IP加入trusted_proxies配置，系统无法正确识别请求协议，仍会生成HTTP资源链接。
• SSL stapling配置异常：当前Nginx开启了OCSP stapling，但如果使用的是自签名证书，该功能会失效，可能引发SSL加载异常。可临时关闭ssl_stapling on和ssl_stapling_verify on测试。
• 缓存残留：开启SSL前的HTTP资源地址可能被浏览器或Akeneo缓存，需清除浏览器缓存，并执行bin/console akeneo:asset:refresh-cache清理Akeneo资产缓存。

内容的提问来源于stack exchange，提问作者MantiS