Welcome! Log In Create A New Profile

Advanced

Re: https прокси

September 17, 2010 07:22PM
У меня подобная проблема и рестарт не помогает. Используя инструкции с этой страницы http://www.debian-administration.org/articles/618 сгенерил свое CA и сделал самоподписный сертификат. CN: *.amazonaws.com
Система для тестов, не удивляйтесь такому конфигу:


worker_processes 1;
error_log logs/error.log;
events {
worker_connections 1024;
}
http {
upstream frontends {
server 127.0.0.1:4114 weight=20;
server 127.0.0.1:4224 weight=1;
}
include mime.types;
default_type application/octet-stream;
keepalive_timeout 65;
proxy_read_timeout 200;
sendfile on;
tcp_nopush on;
tcp_nodelay on;
gzip on;
gzip_min_length 1000;
gzip_proxied any;
gzip_types text/plain text/css text/xml
application/x-javascript application/xml
application/atom+xml text/javascript;
proxy_next_upstream error;
server {
listen 4444;
server_name localhost servername.amazonaws.com;
location / {
root html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
server {
listen 443;
server_name servername.amazonaws.com;
ssl on;
ssl_certificate /usr/local/nginx/conf/newcert.pem;
ssl_certificate_key /usr/local/nginx/conf/newkey.nopass.pem;
access_log logs/ssl_access.log;
error_log logs/ssl_error.log debug;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.html index.htm;
}
}

}

FF3 при доступе к https://amazonaws.com:4444 выдает:

SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

В простом access логе пишет такую фигню: "\x16\x03\x01\x00?\x01\x00\x00?\x03\x01L???&?z=\x0F?" 400 173 "-" "-"
в logs/ssl_access.log и error_log logs/ssl_error.log не пишет ничего
Subject Author Posted

https прокси

InG0d August 20, 2010 08:21AM

Re: https прокси

Илья Шипицин August 20, 2010 03:24PM

Re: https прокси

Gena Makhomed August 20, 2010 03:42PM

Re: https прокси

Илья Шипицин August 21, 2010 02:12AM

Re: https прокси

big bond August 21, 2010 02:32AM

Re: https прокси

Igor Sysoev August 21, 2010 02:36AM

Re: https прокси

Igor Sysoev August 21, 2010 02:34AM

Re: https прокси

maty September 17, 2010 07:22PM

Re: https прокси

maty September 17, 2010 07:45PM

Re: https прокси

Alex Vorona September 18, 2010 01:34AM

Re: https прокси

maty September 18, 2010 09:06AM

Re: https прокси

InG0d August 21, 2010 03:07AM

Re: https прокси

InG0d August 21, 2010 04:56AM

Re: https прокси

Igor Sysoev August 21, 2010 03:38AM

Re: https прокси

Sergey Shepelev August 21, 2010 11:40AM

Re: https прокси

InG0d August 21, 2010 11:46AM

Re: https прокси

Igor Sysoev August 21, 2010 11:44AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 310
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready