Welcome! Log In Create A New Profile

Advanced

Не получается настроить SNI (виртуальные хосты для HTTPS)

Vladimir M
February 24, 2011 03:50PM
Помогите, пожалуйста, заставить работать 2 wildcard SSL сертификата на одном ip
Есть сертификаты для *.domain1.com и *.domain2.com
Проблема в том, что в ответ на запрос на
'https://my.domain2.com/login/' едет сертификат от domain1.com

nginx -V
nginx version: nginx/0.7.63
TLS SNI support enabled
configure arguments: --prefix=/usr --user=www-data --group=www-data
--conf-path=/etc/nginx/nginx.conf --pid-path=/var/run/nginx.pid
--error-log-path=/var/log/nginx/error.log
--http-log-path=/var/log/nginx/access.log
--http-client-body-temp-path=/var/cache/nginx/client-body
--http-proxy-temp-path=/var/cache/nginx/proxy
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi
--with-http_perl_module --with-http_ssl_module --with-http_sub_module
--with-http_realip_module --with-debug


server {
ssl on;
listen 443;
server_name *.domain1.com;
ssl_certificate /etc/nginx/cert/domain1.com.crt;
ssl_certificate_key /etc/nginx/cert/domain1.com.key;

location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_pass http://localhost:4433;
}
}

server {
ssl on;
listen 443;
server_name *.domain2.com;
ssl_certificate /etc/nginx/cert/domain2.com.crt;
ssl_certificate_key /etc/nginx/cert/domain2.com.key;
keepalive_timeout 70;

location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_pass http://localhost:4433;
}
}

wget -S -O /dev/null 'https://my.domain2.com/login/'
--2011-02-24 23:37:27-- https://my.domain2.com/login/
Resolving my.domain2.com... <тут был ip>
Connecting to my.domain2.com|<тут был ip>|:443... connected.
ERROR: certificate common name `*.domain1.com' doesn't match requested
host name `my.domain2.com'.
To connect to my.domain2.com insecurely, use `--no-check-certificate'.

_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://nginx.org/mailman/listinfo/nginx-ru
Subject Author Posted

Не получается настроить SNI (виртуальные хосты для HTTPS)

Vladimir M February 24, 2011 03:50PM

Re: Не получается настроить SNI (виртуальные хосты для HTTPS)

Alex Vorona February 24, 2011 03:56PM

Re: Не получается настроить SNI (виртуальные хосты для HTTPS)

Andrew Kopeyko February 25, 2011 02:24AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 130
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready