Welcome! Log In Create A New Profile

Advanced

IPv6, HTTPS, and SNI

Nikolai Lusan
December 07, 2015 05:02AM
Hi,

I am having in issue using https with multiple sites on ipv6 (nominally
SNI). If I declare more than one listen directive for ipv6 on port 443
nginx refuses to start. The ipv4 configuration is fine, it's only an
issue with ipv6.

Nginx details:

  nginx version: nginx/1.9.7
  built by gcc 4.9.2
  built with OpenSSL 1.0.1k 8 Jan 2015
  TLS SNI support enabled

Configuration looks like:

server {
    listen              80
    listen              [::]:80;
    listen              443 ssl;
    listen              [::]:443 ssl;
    server_name         my_site.com;
    ssl_certificate     my_site.com.crt;
    ssl_certificate_key my_site.com.key;
    ...
}
server {
    listen              80;
    listen              [::]:80;
    listen              443 ssl;
    listen              [::]:443 ssl;
    server_name         your_site.com;
    ssl_certificate     your_site.com.crt;
    ssl_certificate_key your_site.com.key;
    ...
}

Does anyone have an idea on why this might be occurring? In theory ipv6
shouldn't make a difference, and it sure as heck doesn't make a
difference to the ipv4 configuration.

--
Nikolai Lusan <nikolai@lusan.id.au>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

IPv6, HTTPS, and SNI

Nikolai Lusan December 07, 2015 05:02AM

Re: IPv6, HTTPS, and SNI

itpp2012 December 07, 2015 06:32AM

RE: IPv6, HTTPS, and SNI

Lukas Tribus December 07, 2015 07:18AM

Re: IPv6, HTTPS, and SNI

Maxim Dounin December 07, 2015 08:02AM

Re: IPv6, HTTPS, and SNI

Maxim Dounin December 07, 2015 07:54AM

Re: IPv6, HTTPS, and SNI

Maxim Dounin December 07, 2015 08:02AM

Re: IPv6, HTTPS, and SNI

A. Schulze December 07, 2015 08:14AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 180
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready