Welcome! Log In Create A New Profile

Advanced

Reverse proxy SSL Client issue

Posted by raphaelk 
Reverse proxy SSL Client issue
January 28, 2013 12:07PM
Hello,

I have an anoying issue with Nginx installed on ubuntu 10.04 as a reverse proxy ;

I have multiple SSL Virtual Host with their own SSL certificate ; everything is running fine, but with some browser (IE6, 7, adroid tablet ...) the client have an SSL warning. It seems the certificate that the browser read does not fit the FQDN. I know this is an client issue, but I wonder if there if any tips to avoid this.

Please find here a VH config ;

server {
listen 443;
server_name FQDN_OF_THE_VH;

access_log /var/log/nginx/vh1log;
error_log /var/log/nginx/vh.log info;

ssl on;
ssl_certificate /etc/ssl/file.crt;
ssl_certificate_key /etc/ssl/file.key;

ssl_session_timeout 5m;

ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;


location / {
proxy_pass http://internal.server/;
}
}

Regards,
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 142
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready