Re: Nginx как SSL клиент

[Dothris]

server {
    listen 443;
    server_name server-in-inet;
    access_log /var/log/nginx/subscription-access.log main;
    error_log  /var/log/nginx/subscription-error.log warn;
    proxy_set_header        X-Real-IP $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header        X-Forwarded-Host $host;
    proxy_set_header        X-Forwarded-Server $host;
    proxy_set_header        X-Forwarded-Proto $scheme;
    proxy_set_header        Host $host;

    location = / {
        proxy_buffering off;
        proxy_ssl_server_name on;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_ssl_name "server-in-inet";
        proxy_ssl_certificate        ssl/client-cert.pem;
        proxy_ssl_certificate_key    ssl/privkey.key;
        proxy_ssl_trusted_certificate ssl/trusted_ca_cert.pem;
        proxy_ssl_verify       on;
        proxy_ssl_verify_depth 2;
        proxy_ssl_session_reuse on;
        proxy_ssl_protocols           TLSv1 TLSv1.1 TLSv1.2;
        proxy_ssl_ciphers             HIGH:!aNULL:!MD5;
        proxy_pass  https://server-in-inet:443;
    }
}


curl -H "Host: server-in-inet"  ip-balancera -v --header
"Content-Type:application/xml" -d '<?xml version=”1.0”
encoding=”UTF-8”?><TKKPG><Request><Operation>CreateOrder</Operation><Language>RU</Language><Order><Merchant>id</Me
rchant><Amount>546</Amount><Currency>4574</Currency><Description>description</Description><ApproveURL>http://localhost/approve</ApproveURL><CancelURL>http://localhost/cancel</CancelURL><Decline
URL>http://localhost/decline</DeclineURL><OrderType></OrderType></Order></Request></TKKPG>'
http://server-in-inet:443/Exec

Posted at Nginx Forum: https://forum.nginx.org/read.php?21,274002,274013#msg-274013