Welcome! Log In Create A New Profile

Advanced

Re: Enabling ssl crashes windows nginx 1.0.0

Ryan Malayter
April 19, 2011 11:18AM
On Mon, Apr 18, 2011 at 11:59 PM, Igor Sysoev <igor@sysoev.ru> wrote:
> An nginx worker of Windows version does not inherit configuraiton
> file from a master process as Unix version does. So it loads certificate
> separately and waits for the passphrase too. The only solution is to
> remove passphrase from certificate key.

Set strong permissions of course, but you can also probably protect
the key file with the encrypting file system on Windows boxes,
encrypted with the only the user account nginx uses and no recovery
key. This makes it about as safe as possible, although an attacker
that gains LocalSystem privileges can still get at the private key
with some work (really, anyone who has the rights to attach a debugger
to the nginx process could get the key from memory).
--
RPM

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx
Subject Author Posted

Enabling ssl crashes windows nginx 1.0.0

jakehilton April 18, 2011 12:57PM

Re: Enabling ssl crashes windows nginx 1.0.0

beksam April 18, 2011 11:18PM

Re: Enabling ssl crashes windows nginx 1.0.0

Igor Sysoev April 19, 2011 01:00AM

Re: Enabling ssl crashes windows nginx 1.0.0

Ryan Malayter April 19, 2011 11:18AM

Re: Enabling ssl crashes windows nginx 1.0.0

jakehilton April 19, 2011 01:04PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 65
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready