Hi, In my nginx.conf in http section I got: fastcgi_cache_path /var/cache/nginx/cache/heppler keys_zone=heppler:500m levels=1:2 inactive=600s max_size=100m; fastcgi_temp_path /var/cache/nginx/fastcgi_temp; In my server section I got: location ~ \.php$ { fastcgi_split_path_info ^(.+\.php)(/.+)$; try_files $fastcgi_script_name =404; fastcby p.heppler - How to...
The blacklist note says: This list includes those cipher suites that do not offer an ephemeral key exchange and those that are based on the TLS null, stream, or block cipher type (as defined in Section 6.2.3 of ). But AES256+EECDH:AES256+EDH doesn't match this blacklist because those are all ephemeral key exchange ciphers, aren't they?by p.heppler - Nginx Mailing List - English
I'm running nginx 1.9.5 and switched from spdy to http/2. I wonder why I had to change my cipher list and add "weaker" ciphers? before (worked fine with spdy): ssl_ciphers 'AES256+EECDH:AES256+EDH'; after: ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';by p.heppler - Nginx Mailing List - English
http://paste.debian.net/127774/ ^^ So sollte es gehen.by p.heppler - German Forum
Versuch mal das in deinem location / {} Block: try_files $uri $uri/ /index.php?q=$uri&$args;by p.heppler - German Forum
I got it! SPDY breaks as soon as my Upstream uses GZip! I turned GZip off in Railo and voila it works. Turn it on and get blank page again.by p.heppler - Nginx Mailing List - English
In Railo you can access some environment and client vars within a struct called cgi. If I hit my site with plain ssl it shows cgi.server_port = 80. Should be 443, shouldn't it? Hitting Tomcat directly shows cgi.server_port=8888 which is fine.by p.heppler - Nginx Mailing List - English
Damn, seems Firefox didn't clear the cache even if I told him to do so. Worked a while, but now blank page again. But it has to be the Tomcat backend 'cause PHP passed thru to fastcgi works.by p.heppler - Nginx Mailing List - English
Hmm, just tried adding proxy_set_header If-none-Match $http_if_none_match; to my config and now it works with spdy to. Why do I need to set this manually when using spdy, but not on "normal" http/https? Weird...by p.heppler - Nginx Mailing List - English
I checked Tomcat logs. No errors, just status 200 and zero length. I appended %v - Local server name to the log to see if $host is passed thru correct. It is. And now it's getting weird. I replcaed my complex website (which runs fine with pure ssl!) with a simple "Hello World" and it works! Seems the issue was ETag / If-none-match Headers In my website I set ETag for dynamic pagesby p.heppler - Nginx Mailing List - English
Strange. As said with pure ssl it works, it's just the spdy part. I'll check Tomcat logs.by p.heppler - Nginx Mailing List - English
Another run with Tomcat, fresh log: 2014/02/18 15:58:53 12993#0: epoll add event: fd:9 op:1 ev:00002001 2014/02/18 15:58:57 12993#0: post event 00007F19759D4078 2014/02/18 15:58:57 12993#0: delete posted event 00007F19759D4078 2014/02/18 15:58:57 12993#0: accept on 192.168.89.175:443, ready: 1 2014/02/18 15:58:57 12993#0: posix_memalign: 0000000001CF4860:256 @16 2014/02/18 15:58:57 1by p.heppler - Nginx Mailing List - English
I meanwhile replaced Tomcat with Jetty, because Jetty also supports SPDY. But same result.by p.heppler - Nginx Mailing List - English
I just created a new log. This is from nginx restart to first request: 2014/02/18 15:45:56 12839#0: epoll add event: fd:9 op:1 ev:00002001 2014/02/18 15:46:12 12839#0: post event 00007F29CC9D1078 2014/02/18 15:46:12 12839#0: delete posted event 00007F29CC9D1078 2014/02/18 15:46:12 12839#0: accept on 192.168.89.175:443, ready: 1 2014/02/18 15:46:12 12839#0: posix_memalign: 0000000002547by p.heppler - Nginx Mailing List - English
Hello, I compiled nginx 1.5.10 on Centos 6.5 and try to use it as frontend for Tomcat. If I use pure SSL everything works fine. But as soon as I enable SPDY, I only get a blank page. And Content-Length Header is 0, but HTTP status code is 200. But, the blank page only affects request which are handled by Tomcat. Static files, served by nginx, work with SPDY. Here my vhost conf: # Redirecby p.heppler - Nginx Mailing List - English