All files from this thread

File Name	File Size		Posted by	Date
ssl-params.conf	747 bytes	open | download	Mephysto On Hell	05/04/2018	Read message
cloud.diakont.it.conf	143 bytes	open | download	Mephysto On Hell	05/04/2018	Read message

Hello Meph,

In configuration file "cloud.diakont.it.conf":
- "ssl_certificate" please set path of only public certificate of server (cloud.diakont.it), and in "ssl_certificate_key" please set path of only private key of server (cloud.diakont.it).

In configuration file "ssl-params.conff":
- The certificates that you use for the server and for the client, from whom are they issued and signed? If you are from your publisher and signer, these parameters will be removed: ssl_ecdh_curve, ssl_stapling, add_header X-Frame-Options DENY; add_header X-Content-Type-Options nosniff;

Change parameter: resolver_timeout 10s.

In nginx config:
- Add this argument:
proxy_ssl_verify on;
proxy_ssl_verify_depth 2;
proxy_ssl_session_reuse on;
proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
proxy_ssl_trusted_certificate <PATH-OF-ROOT-CA-CERTIFICATE>;
- And in location / like this:
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_pass https://cloud_ssl/;
}

And check the configuration file (nginx -t).
After this, please send me more access and error log for this.


Best regards,
Goce Joncheski