Duh. I can't believe I missed that. It's working properly now. Thanks for the help.
On Thu, Aug 16, 2012 at 4:57 AM, Matt <[email protected]> wrote: > You want proxy_pass to use http, not https. > > On Thu, Aug 16, 2012 at 3:25 AM, Mark Hahn <[email protected]> wrote: > >> I'm sorry if this is an nginx question and shouldn't be on this forum. >> The nginx forum is pretty much dead. >> >> I have nginx front-ending my node server. It has worked well for some >> time. I am now adding ssl to my setup. I want to terminate the SSL at the >> front-end nginx because I've heard that node's HTTPS server is slower. >> (Correct me if I'm wrong). My understanding is that terminating SSL in >> nginx means that simple HTTP would be sent to my back-end node server. >> (Again, correct me if I'm wrong). >> >> I switched nginx to use SSL (see conf file below) and my setup didn't >> work until I also switched my back-end node server to use https. This >> doesn't seem right. >> >> Stupid Question: Is it possible to accidentally terminate on both the >> front-end and back-end at the same time? It doesn't seem like this would >> be possible and it would be the worst of all possible setups. My current >> setup appears to be set this way. >> >> Here is my nginx conf file. I would appreciate it if anyone could take a >> quick look and tell me if this should be terminating SSL (converting HTTPS >> to HTTP). >> >> server { >> listen 80; >> rewrite ^(.*)$ https://$host$1 permanent; >> } >> >> server { >> listen 443 ssl; >> >> ssl on; >> ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; >> ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; >> ssl_certificate_key /root/domain.key; >> ssl_certificate /root/domain.crt; >> >> ssl_session_cache shared:SSL:10m; >> ssl_session_timeout 10m; >> >> keepalive_timeout 60; >> >> location ~ \/(.*images\/.*|.*\.js|.*\.css|.*\.swf)$ { >> root /ri/src; >> } >> >> location ~ \/($|acct|help|login|main|test).* { >> # node server is listening on port 81 >> proxy_pass https://localhost:81; >> proxy_redirect off; >> proxy_set_header X-Real-IP $remote_addr; >> proxy_set_header Host $host; >> proxy_set_header X-Forwarded-Proto https; >> } >> >> } >> >> -- >> Job Board: http://jobs.nodejs.org/ >> Posting guidelines: >> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines >> You received this message because you are subscribed to the Google >> Groups "nodejs" group. >> To post to this group, send email to [email protected] >> To unsubscribe from this group, send email to >> [email protected] >> For more options, visit this group at >> http://groups.google.com/group/nodejs?hl=en?hl=en >> > > -- > Job Board: http://jobs.nodejs.org/ > Posting guidelines: > https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines > You received this message because you are subscribed to the Google > Groups "nodejs" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/nodejs?hl=en?hl=en > -- Job Board: http://jobs.nodejs.org/ Posting guidelines: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines You received this message because you are subscribed to the Google Groups "nodejs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/nodejs?hl=en?hl=en
