Re: "A" Grade SSL/TLS with Nginx and StartSSL

2013-10-15 Thread Piotr Sikora
Hi Julien, > Afaik, the above dynamically links openssl. Am I wrong? Yes, you're wrong. > Are you saying you would rather use non-PFS ciphers than wait an extra 15ms > to complete a DHE handshake? I wouldn't. No, I'm saying that since you're compiling against OpenSSL-1.0.1, you've got ECDHE cip

Re: cookie and source IP logic in server block

2013-10-15 Thread sfrazer
Thanks! I wasn't aware you could combine variables like that in a map statement. handy. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243687,243736#msg-243736 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/n

Re: SSL certificate not loaded

2013-10-15 Thread Maxim Dounin
Hello! On Tue, Oct 15, 2013 at 11:14:42AM -0400, gaspy wrote: > > The message suggests you have another server{} listening on the > > same port, without ssl_certificate defined, and it's selected > > based on SNI. > > Hi Maxim and thanks for the quick reply. > > I have another server block ju

Re: SSL certificate not loaded

2013-10-15 Thread gaspy
> The message suggests you have another server{} listening on the > same port, without ssl_certificate defined, and it's selected > based on SNI. Hi Maxim and thanks for the quick reply. I have another server block just for redirect, I disabled SSL on it but the problem persists. Here's how the

Re: Accessing binding nginx via Lua

2013-10-15 Thread Maxim Dounin
Hello! On Tue, Oct 15, 2013 at 10:11:10AM -0400, itpp2012 wrote: > Maxim Dounin Wrote: > --- > > In most cases, workers just can't open listening sockets due to security > restrictions. > > I'd still like to try, can you point me where a worker

Re: Accessing binding nginx via Lua

2013-10-15 Thread itpp2012
Maxim Dounin Wrote: --- > In most cases, workers just can't open listening sockets due to security restrictions. I'd still like to try, can you point me where a worker binds to the inherited values? Posted at Nginx Forum: http://forum.nginx.org

Re: SSL certificate not loaded

2013-10-15 Thread Maxim Dounin
Hello! On Tue, Oct 15, 2013 at 09:13:52AM -0400, gaspy wrote: > I have a strange problem with SLL. > > I purchased a SSL cert and combined the intermediary files into one: > cat www_mydomain_com.crt PositiveSSLCA2.crt AddTrustExternalCARoot.crt >> > mydomain-budle.crt > > In the server conf I

Re: Accessing binding nginx via Lua

2013-10-15 Thread Maxim Dounin
Hello! On Tue, Oct 15, 2013 at 07:41:45AM -0400, itpp2012 wrote: > Would it be possible (and how) to access the bindings inside nginx via Lua? > for an experiment I'd like to change the listening port of a running nginx > process. I can't really speak of Lua, but given the nginx architecture it'

Re: "A" Grade SSL/TLS with Nginx and StartSSL

2013-10-15 Thread Julien Vehent
On 2013-10-15 00:39, Piotr Sikora wrote: Hi Julien, I spent some time hacking on my SSL conf recently. Nothing new, but I figured I'd share it with the group: https://jve.linuxwall.info/blog/index.php?post/2013/10/12/A-grade-SSL/TLS-with-Nginx-and-StartSSL Feel free to comment here. a few

SSL certificate not loaded

2013-10-15 Thread gaspy
I have a strange problem with SLL. I purchased a SSL cert and combined the intermediary files into one: cat www_mydomain_com.crt PositiveSSLCA2.crt AddTrustExternalCARoot.crt >> mydomain-budle.crt In the server conf I have the following: server { listen 80; lis

Accessing binding nginx via Lua

2013-10-15 Thread itpp2012
Would it be possible (and how) to access the bindings inside nginx via Lua? for an experiment I'd like to change the listening port of a running nginx process. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,243705,243705#msg-243705 ___ nginx