Welcome! Log In Create A New Profile

Advanced

Re: Multiple server definitions with SSL

July 28, 2011 02:56AM
On Tue, Jul 26, 2011 at 10:12:43PM +0400, Maxim Dounin wrote:
> Hello!
>
> On Tue, Jul 26, 2011 at 05:44:32PM +0100, Ben Lancaster wrote:
>
> > We recently had a problem where we created a new server
> > configuration (for http with and without ssl on ports 443 and 80
> > respectively) on a shared web server which also included a
> > number of other nginx servers similarly configured.
> >
> > Unfortunately, we neglected to include the ssl_certificate and
> > ssl_certificate_key directives for the new server. So, the
> > configurations looked something like this:
>
> [...]
>
> > Is this expected behaviour? Should nginx -t not have flagged
> > that there was no default ssl_certificate(_key) directives
> > defined?
>
> Probably yes, but this isn't currently done when you define
> ssl servers with
>
> listen ... ssl;
>
> Using "ssl on;" in separate server definition will give you
> expected config test error.

I'm going to decprecate "ssl on" directive in favour of "listen ... ssl",
since SSL is rather a port option, but not server one.
The initial "ssl on" was inspired by Apache 1.3.
Apache's "Listen ... https" appeared in somewhere in 2005.


--
Igor Sysoev

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Multiple server definitions with SSL

Ben Lancaster July 26, 2011 12:46PM

Re: Multiple server definitions with SSL

Maxim Dounin July 26, 2011 02:14PM

Re: Multiple server definitions with SSL

Igor Sysoev July 28, 2011 02:56AM

Re: Multiple server definitions with SSL

Maxim Dounin July 28, 2011 05:38AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 50
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready