NginxHttpSecureLinkModule

Adam Kuśmierz adam at kusmierz.be
Sat Jun 6 18:32:00 MSD 2009


Hi,

I was try http://wiki.nginx.org/NginxHttpSecureLinkModule and I think it
doesn't work.. Or I did something wrong. In configuration I've:

location /test {
secure_link_secret "secret";
if ($secure_link = "") {
return 403;
}
}

On server, I've file named "file" in folder "test". So link to this file
should be /test/file (without NginxHttpSecureLinkModule). When I'm using
NginxHttpSecureLinkModule, I've created link:
/test/c0640c1e91de82e703d65415ab52ef8b/file
(md5("filesecret") = "c0640c1e91de82e703d65415ab52ef8b")

I've got 404 error (in opposite to 403 with wrong hash). Weird. I've created
folder "c0640c1e91de82e703d65415ab52ef8b" and then put file "file" in it and
then it works. But wait a minute. It isn't what I want.

Second thing, why I can't use variables (ie. $remote_addr)
as secure_link_secret?

I'm using Nginx version: 0.7.54 (last stable).

Kind regards,
Adam Kuśmierz

-- 
English version below.

Wiadomość ta jest przeznaczona jedynie dla osoby lub podmiotu będącego jej
adresatem i może zawierać poufne lub uprzywilejowane informacje. Zakazane
jest przeglądanie, przesyłanie, rozpowszechnianie lub inne wykorzystywanie
tych informacji, jak również podejmowanie działań na ich podstawie, przez
osoby lub podmioty inne niż zamierzony adresat.
Jeśli otrzymali Państwo tę wiadomość przez pomyłkę, prosimy o poinformowanie
nadawcy i usunięcie jej z komputera.

The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential or privileged material.
Any review, retransmission, dissemination or other use of, or taking of any
action in reliance upon, this information by persons or entities other than
the intended recipient is prohibited.
If you received this in error, please notify the sender and delete the
material from your computer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nginx.org/pipermail/nginx/attachments/20090606/0a2d0fdb/attachment.html>


More information about the nginx mailing list