привет всем!
У меня проблемы с конфигурацией HTTPS,
я знаю, что есть много документов, я все пересмотрел и использую дефолтный конфиг, все работает по хттп, хттпс не пашет,
Я просто хочу понять, это проблема в Nginx или что-то еще ...или просто нада выспаться....


пожалуйста, ребята, просто посмотрите на мой конфиг и некоторые ошибки из лога.

где копать?
я не могу запустить магазин без шифровки :)


спасибо.

[code]
user nginx;
worker_processes 1;
error_log /var/log/nginx/error.log;
pid /var/run/nginx.pid;

events {
worker_connections 1024;
}

http {
include /etc/nginx/mime.types;
default_type application/octet-stream;

log_format main '$remote_addr - $remote_user [$time_local] $request '
'"$status" $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';

access_log /var/log/nginx/access.log main;
sendfile on;
keepalive_timeout 65;

# fastcgi nodes
upstream backend {
server unix:/tmp/fcgi.sock;
}



server {
listen 80;
server_name domain.com www.domain.com;
root /var/www/html;
autoindex off;

gzip on; # use gzip compression
gzip_proxied any; # enable proxy for the fcgi requests
gzip_types text/plain text/html text/css text/javascript;

# protection (we have no .htaccess)
location ~ (/(app/|includes/|/pkginfo/|var/|report/config.xml)|/\.svn/|/.hta.+) {
deny all;
}
location /lib/ {
allow 127.0.0.1/32;
deny all;
}




# handle all .php files, /downloader and /report
location ~ (\.php|/downloader/?|/report/?)$ {
if ($request_uri ~ /(downloader|report)$){ # no trailing /, redirecting
rewrite ^(.*)$ $1/ permanent;
}
fastcgi_index index.php;
include /etc/nginx/fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
if (-e $request_filename) { # check if requested path exists
fastcgi_pass backend;
}

}

# handle
location /
{
# set expire headers
if ($request_uri ~* "\.(ico|css|js|gif|jpe?g|png)$") {
expires max;
}
# set fastcgi settings, not allowed in the "if" block
include /etc/nginx/fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root/index.php;
fastcgi_param SCRIPT_NAME /index.php;
# rewrite - if file not found, pass it to the backend
if (!-f $request_filename) {
fastcgi_pass backend;
break;
}
}

}

server {
listen 443;
server_name domain.com www.domain.com;

access_log /var/log/nginx/access.log main;
error_log /var/log/nginx/error.log;

ssl on;
ssl_certificate /etc/nginx/cert/mysuper-bundle.crt;
ssl_certificate_key /etc/nginx/cert/myserver.key;

ssl_session_timeout 5m;

ssl_protocols SSLv3 TLSv1;
ssl_ciphers AES256-SHA:AES128-SHA:DES-CBC3-SHA:RC4-SHA:RC4-MD5;
ssl_prefer_server_ciphers on;

keepalive_timeout 70;
add_header Front-End-Https on;

root /var/www/html;
index index.html index.htm index.php index.xml;

location ~ \.php$ {
root /var/www/html;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param HTTPS on;
include /etc/nginx/fastcgi_params;
}
}

}
[/code]



[code]
2010/06/12 13:14:06 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:14:08 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:15:06 [error] 20335#0: *1 open() "/var/www/html/index.php/customer/account" failed (20: Not a directory), client: 84.52.48.xxx, server: domain.com, request: "GET /index.php/customer/account HTTP/1.1", host: "www.domain.com"

2010/06/12 13:17:19 [error] 20335#0: *14 "/var/www/html/index.php/customer/account/login/index.html" is not found (20: Not a di
[/code]