Welcome! Log In Create A New Profile

Advanced

ssl https config

Posted by dedo 
ssl https config
June 12, 2010 04:41PM
hi all
i have problem with https configuration,
i know there is a lot of docs around but anyway im totally lost,
i just want to understand what causing this errors is it nginx or something else...

please, guys just take a look at my config and some error output
(pasted few different errors, as im changing nginx.conf file parameters)

[code]
user nginx;
worker_processes 1;
error_log /var/log/nginx/error.log;
pid /var/run/nginx.pid;

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] $request '
'"$status" $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;
sendfile on;
keepalive_timeout 65;

# fastcgi nodes
upstream backend {
server unix:/tmp/fcgi.sock;
}



server {
listen 80;
server_name domain.com www.domain.com;
root /var/www/html;
autoindex off;

gzip on; # use gzip compression
gzip_proxied any; # enable proxy for the fcgi requests
gzip_types text/plain text/html text/css text/javascript;

# protection (we have no .htaccess)
location ~ (/(app/|includes/|/pkginfo/|var/|report/config.xml)|/\.svn/|/.hta.+) {
deny all;
}
location /lib/ {
allow 127.0.0.1/32;
deny all;
}




# handle all .php files, /downloader and /report
location ~ (\.php|/downloader/?|/report/?)$ {
if ($request_uri ~ /(downloader|report)$){ # no trailing /, redirecting
rewrite ^(.*)$ $1/ permanent;
}
fastcgi_index index.php;
include /etc/nginx/fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
if (-e $request_filename) { # check if requested path exists
fastcgi_pass backend;
}

}

# handle
location /
{
# set expire headers
if ($request_uri ~* "\.(ico|css|js|gif|jpe?g|png)$") {
expires max;
}
# set fastcgi settings, not allowed in the "if" block
include /etc/nginx/fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root/index.php;
fastcgi_param SCRIPT_NAME /index.php;
# rewrite - if file not found, pass it to the backend
if (!-f $request_filename) {
fastcgi_pass backend;
break;
}
}

}

server {
listen 443;
server_name domain.com www.domain.com;

access_log /var/log/nginx/access.log main;
error_log /var/log/nginx/error.log;

ssl on;
ssl_certificate /etc/nginx/cert/mysuper-bundle.crt;
ssl_certificate_key /etc/nginx/cert/myserver.key;

ssl_session_timeout 5m;

ssl_protocols SSLv3 TLSv1;
ssl_ciphers AES256-SHA:AES128-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5;
ssl_prefer_server_ciphers on;

keepalive_timeout 70;
add_header Front-End-Https on;

root /var/www/html;
index index.html index.htm index.php index.xml;

location ~ \.php$ {
root /var/www/html;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param HTTPS on;
include /etc/nginx/fastcgi_params;
}
}

}

[/code]

[code]
2010/06/12 13:14:06 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:14:08 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:15:06 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:17:19 [error] 20335#0: *14 "/var/www/html/index.php/customer/account/login/index.html" is not found (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account/login/ HTTP/1.1", host: "www.domain.com", referrer: "http://www.domain.com/"
[/code]



Edited 1 time(s). Last edit at 06/12/2010 04:46PM by dedo.
Re: ssl https config
June 14, 2010 02:13AM
i need some advices, guys,
cause i dont know whats going on, im using default config and it works fine for http, but not for https... these informations in error log gives me nothing...
is there anyone alive here with decent experience?
Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 103
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready