Welcome! Log In Create A New Profile

Advanced

Проблема с SSl

Иван Мишин
October 19, 2018 10:58AM
Есть такой конфиг:

server {
> listen 443 ssl;
> server_name test.ru;
>
> ssl_certificate /etc/nginx/include/test/lich-2012-srv.pem;
> ssl_certificate_key
> 'engine:gostengy:s38g83e8ae2e2183b3624f880eb1ca12ggcdfebf';
> ssl_verify_client off;
> ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
> ssl_ciphers GOST2012-GOST8912:GOST2001-GOST89:HIGH;
> ssl_prefer_server_ciphers on;
> location / {
> proxy_set_header X-Real-IP $remote_addr;
> proxy_set_header X-Forwarded-For
> $proxy_add_x_forwarded_for;
> proxy_hide_header Host;
> proxy_set_header X-NginX-Proxy true;
> proxy_set_header Host test.loc;
> proxy_pass http://test.loc;
> proxy_redirect off;
> client_max_body_size 300M;
> sendfile on;
> send_timeout 300s;
> }
> }


Со временем сервер либо перестает работать совсем, либо работает через раз.
при этом в логах вот такая ошибка:

> [crit] 28474#28474: *401018 SSL_do_handshake() failed (SSL:
> error:8001B035:lib(128):gng_keyhandle_getset:GNG_ERR_EXPORT_IMPORT
> error:1419D093:SSL routines:tls_process_cke_gost:decryption failed) while
> SSL handshaking, client: x.x.x.x, server: 0.0.0.0:443


Просьба помочь с решением проблемы.
_______________________________________________
nginx-ru mailing list
nginx-ru@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx-ru
Subject Author Posted

Проблема с SSl

Иван Мишин October 19, 2018 10:58AM

Re: Проблема с SSl

Илья Шипицин October 19, 2018 11:14AM

Re: Проблема с SSl

Иван Мишин October 19, 2018 12:18PM

Re: Проблема с SSl

Maxim Dounin October 22, 2018 07:20AM

Re: Проблема с SSl

Иван Мишин October 22, 2018 11:26AM

Re: Проблема с SSl

Maxim Dounin October 22, 2018 01:52PM

Re: Проблема с SSl

dlavrov December 05, 2018 05:39AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 70
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready