<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000'><div><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Hi B.R. and all,</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Really thank you for your support till now.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">We were able to resolve issue on IE as well as on Firefox.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">we did following settings:-</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">1) IE</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">We added my website to secure site list.</span></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Post that, I imported certificate to "Trusted Root Certiication Authorities".</font></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><br></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">2) I used "security exception option" by adding same certificate twice by accessing two different ports 6401 and 443.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">B. R.> Thank you for all your inputs.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Thanks & Regards,</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Vishal Mestri<br></span></p>
<font face="tahoma, new york, times, serif" size="3"><span name="x"></span></font><br></div><hr id="zwchr" style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 12pt;"><div style="color: rgb(0, 0, 0); font-family: Helvetica, Arial, sans-serif; font-size: 12pt; font-weight: normal; font-style: normal; text-decoration: none;"><b>From: </b>"Vishal Mestri" <vishal.mestri@cloverinfotech.com><br><b>To: </b>nginx@nginx.org<br><b>Sent: </b>Monday, June 2, 2014 7:18:48 PM<br><b>Subject: </b>Re: Issue nginx - ajax<br><br><style>p { margin: 0; }</style><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000"><div><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Hi All and B.R.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">We tested on Apache as well and we faced same issue.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Further, we disabled Antivirus on our client machine.(where we are accessing browser).</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Post that, we did following reverse proxy configuration on Nginx.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">When we receive request on 443 port, it will be sent to 80 port.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">When we receive request on 6401 port , it will be sent to 6400 port.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">This configuration without SSL worked on IE 10, Chrome and firefox as well.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Further, as soon as , I turned on SSL configuration on port 443 and 6401 for Nginx, we faced old issue. i.e. site worked on Chrome, but not on firefox and IE.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Further, we got following error on error log for firefox only.</font></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><b>*29 SSL_read() failed (SSL: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca:SSL alert number 48) while waiting for request, client: 203.115.123.90, server: 0.0.0.0:6401</b></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">We used below commands to generate ssl certificates:-</font></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key</font></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout privateKey.key -out certificate.crt</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Thanks & Regards,</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Vishal Mestri</span></p></div><hr id="zwchr" style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 12pt;"><div style="color: rgb(0, 0, 0); font-family: Helvetica, Arial, sans-serif; font-size: 12pt; font-weight: normal; font-style: normal; text-decoration: none;"><b>From: </b>"Vishal Mestri" <vishal.mestri@cloverinfotech.com><br><b>To: </b>nginx@nginx.org<br><b>Sent: </b>Tuesday, May 27, 2014 10:05:54 AM<br><b>Subject: </b>Re: Issue nginx - ajax<br><br><style>p { margin: 0; }</style><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000"><div><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Thanks B. R. for your immediate reply.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Configuration file which we are using is attached along with the email.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">We want following functions:-</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">On our server there are two services running.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">One on 80 port and another one on 6400 port.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">We want to use Nginx as product which can help us to SSL enable both services and these services does not have capabilities to be SSL Enabled.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Thus, we want to Nginx to listen on two SSL Port 443 and 6401.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">When Nginx receives request on port 443 , it will reverse proxy that request to service running on 80 port.</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-family: Candara, sans-serif; font-size: 13.63636302947998px;">And when Nginx receives request on port 6401 , it will reverse proxy that request to service running on 6400 port.</span></p><p class="MsoNormal" style="margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Service which is running on 80 port is apache tomcat, where as service running on port 6400 is proprietary product which is called using AJAX. </font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;"><br></span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">This configuration is working very well on chrome, but we are facing issue on Internet explorer 8 onwards.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2">Please let us know if shared configuration is correct or not.</font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><font face="Candara, sans-serif" size="2"><br></font></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);">Thank you very much for reply.</p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><br></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);">We have started looking in apache , but still it is in RnD phase.</p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><br></p><p class="MsoNormal" style="color: rgb(0, 0, 0); margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-family: Candara, sans-serif; font-size: 10pt;">Thanks & Regards,</span></p><p class="MsoNormal" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 11pt; margin: 0in 0in 0.0001pt; background-color: rgb(255, 255, 255);"><span style="font-size: 10pt; font-family: Candara, sans-serif;">Vishal Mestri<br></span></p>
<font face="tahoma, new york, times, serif" size="3"><span></span></font><br></div><hr id="zwchr" style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; font-size: 12pt;"><div style="color: rgb(0, 0, 0); font-family: Helvetica, Arial, sans-serif; font-size: 12pt; font-weight: normal; font-style: normal; text-decoration: none;"><b>From: </b>"B.R." <reallfqq-nginx@yahoo.fr><br><b>To: </b>"Nginx ML" <nginx@nginx.org><br><b>Sent: </b>Monday, May 26, 2014 7:25:47 PM<br><b>Subject: </b>Re: Issue nginx - ajax<br><br><div dir="ltr"><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">If you wanted more help, you could provide some of the following:<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">
- Your configuration and what you expect it to do<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">- The step you took to check the communication between nginx and your backend (the dumps of tcpdump) with details of what you expected<br>
<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">Logs only show applied configuration (which might be faulty) do.<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">
<br></div><div class="gmail_default" style="font-size:small;color:rgb(51,51,153)">However, if your decision is already made, then good luck with Apache or squid ;o)<br></div><div class="gmail_extra"><div><font size="1"><span style="color:rgb(102,102,102)">---<br>
</span><b><span style="color:rgb(102,102,102)">B. R.</span></b><span style="color:rgb(102,102,102)"></span></font></div>
</div></div>
<br>_______________________________________________<br>nginx mailing list<br>nginx@nginx.org<br>http://mailman.nginx.org/mailman/listinfo/nginx</div><br></div><br>_______________________________________________<br>nginx mailing list<br>nginx@nginx.org<br>http://mailman.nginx.org/mailman/listinfo/nginx</div><br></div></div><br></div></body></html>