Hello!

On Thu, Nov 19, 2009 at 06:50:02AM -0500, himesh wrote:

> Thanks Maxim,
>
> So i tried the setup, SSL connection between the client and Nginx ( ssl terminating at nginx) and then unencrypted from Nginx to Tomcat.
>
> This is what my nginx.conf file looks like....
>
> user www-data;
> worker_processes 1;
>
> error_log /var/log/nginx/error.log;
> pid /var/run/nginx.pid;
>
> events {
> worker_connections 1024;
> }
>
> http {
> include /etc/nginx/mime.types;
> default_type application/octet-stream;
>
> access_log /var/log/nginx/access.log;
>
> sendfile on;
> #tcp_nopush on;
>
> #keepalive_timeout 0;
> keepalive_timeout 65;
> tcp_nodelay on;
>
> gzip on;
>
> include /etc/nginx/sites-enabled/*;
>
>
>
> server {
>
> server_name himesh.com;
> listen 192.168.1.118:443;
> ssl on;
> ssl_certificate /etc/pound/himesh_com.crt;
> ssl_certificate_key /etc/pound/himesh.key;
>
> access_log /etc/pound/access.log;
>
> location / {
> proxy_set_header X-Forwarded-Host $host;
> proxy_set_header X-Forwarded-Server $host;
> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> proxy_pass http://10.10.1.113:8080/;
> proxy_redirect off;
> }
> }
>
> }
>
>
> Now form the client when i try https://himesh.com i get the the tomcat default page, that is all good.
>
> But https://himesh.com/abc ( abc is an application deployed in tomcat), the browser returns http://himesh.com/abc but now i don't have nginx listening on 80, so there is no answer . This only happens with https. It works fine when iam using just http..
>
> Please advice..

Depending on backend software you may need various quirks to make
this working. Usually correctly configured proxy_redirect is
enough.

See

http://wiki.nginx.org/NginxHttpProxyModule#proxy_redirect

for details.

Maxim Dounin