NGINX http-secure-link 403 !!

[Maxim Dounin]

Hello!

On Wed, Aug 03, 2016 at 08:38:36PM +0500, shahzaib mushtaq wrote:

> Hi,
> 
> We've configured nginx --with-http_secure_link_module to secure the mp4
> links. Currently we're testing it with very basic settings. Following is
> brief explanation of our lab :
> 
> A test.mp4 file is located under directory /tunefiles/files/test.mp4 . Our
> objective is to access this file over secure link such as
> 
>  http://192.168.1.192/files/test.mp4?md5=XXXXXX&expire=2314444 .
> 
> Here is the config of http-secure-link :
> 
> http://pastebin.com/N41WQASj
> 
> We've constructed the md5 & expire using following commands :
> 
> #expiry date is 31st december
> $date -d "2016-12-31 23:59" +%s
> 1470240179
> 
> #md5
> $echo -n '1470240179/files/test.mp4 secret' | openssl md5 -binary | openssl
> base64 | tr +/ -_ | tr -d =
> fY8Iyuqah9coPxTDk-UvVg
> 
> 
> Once everything is constructed, we loaded the following URL into the
> browser & encountered the error 403:
> 
> http://192.168.1.192/files/test.mp4?md5=fY8Iyuqah9coPxTDk-UvVg&expire=1470240179

You are using "expire=" in the request, but "$arg_expires" in the 
configuration.  Note the trailing "s".

-- 
Maxim Dounin
http://nginx.org/