with patch applied, and 'proxy_ssl_server_name on;' this is where the problem appears
2020/06/02 00:50:08 [debug] 20166#20166: *3 verify:1, error:0, depth:2, subject:"/O=example.com/OU=example.com_CA/L=New_York/ST=NY/C=US/emailAddress=ad...@example.com/CN=example.com_CA", issuer:"/O=example.com/OU=example.com_CA/L=New_York/ST=NY/C=US/emailAddress=ad...@example.com/CN=example.com_CA" 2020/06/02 00:50:08 [debug] 20166#20166: *3 verify:1, error:0, depth:1, subject:"/C=US/ST=NY/O=example.com/OU=example.com_CA/CN=example.com_CA_INTERMEDIATE/emailAddress=ad...@example.com", issuer:"/O=example.com/OU=example.com_CA/L=New_York/ST=NY/C=US/emailAddress=ad...@example.com/CN=example.com_CA" 2020/06/02 00:50:08 [debug] 20166#20166: *3 verify:1, error:0, depth:0, subject:"/C=US/ST=NY/L=New_York/O=example.com/OU=example.com_CA/CN=test.example.net/emailAddress=ad...@example.com", issuer:"/C=US/ST=NY/O=example.com/OU=example.com_CA/CN=example.com_CA_INTERMEDIATE/emailAddress=ad...@example.com" 2020/06/02 00:50:08 [debug] 20166#20166: *3 ssl new session: 0E2A0672:32:1105 2020/06/02 00:50:08 [debug] 20166#20166: *3 ssl new session: 31C878D7:32:1104 2020/06/02 00:50:08 [debug] 20166#20166: *3 SSL_do_handshake: 1 2020/06/02 00:50:08 [debug] 20166#20166: *3 SSL: TLSv1.3, cipher: "TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD" 2020/06/02 00:50:08 [debug] 20166#20166: *3 reusable connection: 1 2020/06/02 00:50:08 [debug] 20166#20166: *3 http wait request handler 2020/06/02 00:50:08 [debug] 20166#20166: *3 malloc: 0000555967A0B2E0:1024 2020/06/02 00:50:08 [debug] 20166#20166: *3 SSL_read: 772 2020/06/02 00:50:08 [debug] 20166#20166: *3 SSL_read: -1 2020/06/02 00:50:08 [debug] 20166#20166: *3 SSL_get_error: 2 2020/06/02 00:50:08 [debug] 20166#20166: *3 reusable connection: 0 2020/06/02 00:50:08 [debug] 20166#20166: *3 posix_memalign: 00005559678F6460:4096 @16 2020/06/02 00:50:08 [debug] 20166#20166: *3 posix_memalign: 00005559675113A0:4096 @16 2020/06/02 00:50:08 [debug] 20166#20166: *3 http process request line 2020/06/02 00:50:08 [debug] 20166#20166: *3 http request line: "GET /app1 HTTP/1.1" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http uri: "/app1" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http args: "" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http exten: "" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http process request header line 2020/06/02 00:50:08 [info] 20166#20166: *3 client attempted to request the server name different from the one that was negotiated while reading client request headers, client: 127.0.0.1, server: test.example.net, request: "GET /app1 HTTP/1.1", host: "example.net" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http finalize request: 421, "/app1?" a:1, c:1 2020/06/02 00:50:08 [debug] 20166#20166: *3 event timer del: 50: 3334703 2020/06/02 00:50:08 [debug] 20166#20166: *3 http special response: 421, "/app1?" 2020/06/02 00:50:08 [debug] 20166#20166: *3 http set discard body 2020/06/02 00:50:08 [debug] 20166#20166: *3 headers more header filter, uri "/app1" 2020/06/02 00:50:08 [debug] 20166#20166: *3 lua capture header filter, uri "/app1" 2020/06/02 00:50:08 [debug] 20166#20166: *3 xslt filter header 2020/06/02 00:50:08 [debug] 20166#20166: *3 charset: "" > "utf-8" 2020/06/02 00:50:08 [debug] 20166#20166: *3 HTTP/1.1 421 Misdirected Request noting 2020/06/02 00:50:08 [info] 20166#20166: *3 client attempted to request the server name different from the one that was negotiated while reading client request headers, client: 127.0.0.1, server: test.example.net, request: "GET /app1 HTTP/1.1", host: "example.net" now, need to stare at this and try to figure out 'why?' _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx