[vpsFree.cz: community-list] Nekolik HTTPS virtual serveru pod NginX

[Lukas Nemec]

Ahoj,

nginx -V vystup:

nginx version: nginx/1.6.0
built by gcc 4.4.5 (Debian 4.4.5-8)
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx 
--conf-path=/etc/nginx/nginx.conf 
--error-log-path=/var/log/nginx/error.log 
--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid 
--lock-path=/var/run/nginx.lock 
--http-client-body-temp-path=/var/cache/nginx/client_temp 
--http-proxy-temp-path=/var/cache/nginx/proxy_temp 
--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp 
--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp 
--http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx 
--group=nginx --with-http_ssl_module --with-http_realip_module 
--with-http_addition_module --with-http_sub_module 
--with-http_dav_module --with-http_flv_module --with-http_mp4_module 
--with-http_gunzip_module --with-http_gzip_static_module 
--with-http_random_index_module --with-http_secure_link_module 
--with-http_stub_status_module --with-http_auth_request_module 
--with-mail --with-mail_ssl_module --with-file-aio --with-cc-opt='-g -O2 
-Wp,-D_FORTIFY_SOURCE=2' --with-ld-opt=-Wl,--as-needed --with-ipv6

Pardon, opravdu toto nema s provozem VPS nic spolecneho, opravim otazku 
tedy.

Poradil se tento problem s Nginxem nekomu vyresit?

Diky,
Lukas


On 04/30/2014 08:53 AM, Stanislav Petr wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> Podporu musis mit i v OpenSSL na strane serveru a musi byt i v NGINXu 
> - to ze mas verzi 1.6 jeste nerika nic o tom, jestli je s SNI 
> zkompilovana. Viz dokumentace:
>
> http://nginx.org/en/docs/http/configuring_https_servers.html - 
> odstavec Server Name Indication.
>
> Jinak ptat se jestli tohle nekdo vyresil na VPS je otazka uplne mimo - 
> s provozem na VPS to nema vubec nic spolecneho.
>
> - -- 
> Stanislav Petr
>
> Dne 2014-04-30 08:47, Lukas Nemec napsal:
>> Ahoj vsichni,
>>
>> chtel bych se zeptat, jestli nekdo uz resil problem s NginX a TLS
>> sifrovanim HTTP provozu.
>> Stava se totiz, ze browser ziska spatny certifikat, protoze behem TLS
>> handshake se nevymenuje nazev serveru
>> a tudiz pokud je na jednom IP nekoil virtualnich serveru, muze nginx
>> zaslat spatny certifikat, a pote se zobrazuje
>> v prohlizeci klasicka zluta stranka ze server neni duveryhodny.
>> Hledal jsem na netu, a pise se ze novejsi browsery podporuji SNI, a
>> tim by se tento problem mel vyresit.
>> Bohuzel i kdyz mam novou verzi Nginx (1.6) tak se mi stale na
>> strankach vydava spatny SSL certifikat.
>>
>> Vyresil jste nekdo tento problem na svem VPS?
>>
>> Diky,
>> Lukas
>> _______________________________________________
>> Community-list mailing list
>> Community-list at lists.vpsfree.cz
>> http://lists.vpsfree.cz/listinfo/community-list
> -----BEGIN PGP SIGNATURE-----
> Version: OpenPGP.js v.1.20131017
> Comment: http://openpgpjs.org
>
> wsFcBAEBCAAQBQJTYJ3rCRBZTLswNWPJYwAAuPcP/2KX8Wjeijcea24sOwgI
> jZiTIWGV5qv7D9Y6lMSAyP7KOKCZkHyzRbmFZF1Tv8kzotIK/X/CIJ1/vqe+
> MnJ6jBO/1N/gYMAsTjZE80hEaKH5yZTj1RLYd1+3TvZ9MElpBdbuAX2B0HDV
> bzqtWQ08KHGq/vR//Rz+UiD5XPJB7tWgRXXATF7pcXCKBBs/LM3wRhbsh5Ii
> I0boG4p/HW8JVKDqMqYOsDQkAVVZGRnR2NXO9xPVLMUQSCgwwZyEsWH+LwTv
> pwpzANjE8rfzGy3WK7j1t4Hm5i1QRsJGB1WEnf1yq0R1VRabX0CfIUeCZ+vM
> l/Od4qQGE30JTnsHVEAsCbRh7ZGbSkwweXcalSkTzfenkCwPU5hhfwXcJVVC
> L+uf2DtNwtRGUE7TOG3od9Z/kNki2ipgp5z//bASl/bAV1gbG924JYsCOAvd
> GmpQ5SDbPmwIt0O+Qqxf9ne92Ja1fbv4/ZhbHyotgz8+QIbbw6ZwzgMFprTx
> tgeTit+akft82MGz0hXdDuQW+zzjmIXUIb+jEDNXnaqu0wLORlJgAtnh0TDi
> 3rRiAqbA0iZ6OfkDCRGAiGl4P8leWVjQGK2RVj9UnfS1odAxTByyuW+P1/2Z
> n6cZik6p2uixnsJSA8Uq9Mrlz9ohOICgI2PoLB8B1ZNVX+XsYP96g6CaGZYQ
> FhyJ
> =pPvT
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Community-list mailing list
> Community-list at lists.vpsfree.cz
> http://lists.vpsfree.cz/listinfo/community-list