Welcome! Log In Create A New Profile

Advanced

Re: Nginx and conditional logformat

August 01, 2019 07:18AM
Hi Max.

In our idea with this configuration all the requests use the sslclient
logformat and in case of failure with the certificate the logformat that
will be used is sslclientfull.



Into the location / we enable the ssl_verify_client to optional and
actually we have some if with the variabile $ssl_client_verify to provide a
customized message to the users. It seems that the set variable is not
working into the if statement.

We can’t use the “map” parameter because it works only to a http block and
not into location block.

Thanks,
Marcello


Regards,

Marcello

On Mon, Jul 29, 2019 at 3:02 PM Maxim Dounin <mdounin@mdounin.ru> wrote:

> Hello!
>
> On Fri, Jul 26, 2019 at 03:49:05PM +0200, Marcello Lorenzi wrote:
>
> > Hi Maxim,
> > I tried to configure the location with this example:
> >
> > server {
> > access_log logs/access_log sslclient;
> >
> > location / {
> >
> > if ($ssl_client_verify != "SUCCESS") {
> > set $loggingcert 1;
> > }
> >
> > access_log logs/access_log sslclientfull if=$loggingcert;
> >
> > }
> >
> > }
> >
> > I noticed that all the request inherit the first access_log configuration
> > and not the conditional.
>
> In the configuration in question, all requests handled in
> "location /" will either use the "sslclientfull" log format, or
> won't be logged at all.
>
> If this is not what you observe, most likely you've missed
> something an requests are either not handled in the server in
> question, or not handled in "location /". For example, this
> may happen if you are using "ssl_verify_client on;" and all
> requests without proper client certificates are terminated with
> error 400 in the server context before any processing, hence they
> are not handled in "location /".
>
> --
> Maxim Dounin
> http://mdounin.ru/
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Nginx and conditional logformat

cello86@gmail.com July 25, 2019 05:08AM

Re: Nginx and conditional logformat

Maxim Dounin July 25, 2019 09:20AM

Re: Nginx and conditional logformat

cello86@gmail.com July 26, 2019 09:50AM

Re: Nginx and conditional logformat

Maxim Dounin July 29, 2019 09:04AM

Re: Nginx and conditional logformat

cello86@gmail.com August 01, 2019 07:18AM

Re: Nginx and conditional logformat

Francis Daly August 01, 2019 12:58PM

Re: Nginx and conditional logformat

cello86@gmail.com August 02, 2019 04:34AM

Re: Nginx and conditional logformat

Francis Daly August 02, 2019 10:02AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 123
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready