nginx + ssl
mikhail123
nginx-forum на nginx.us
Вт Дек 8 23:52:45 MSK 2009
Обновил порты, пересобрал nginx.
Такая ошибка:
: nginx was built with SNI support, however, now it is linked dynamically to an OpenSSL library which has no tlsext support, therefore SNI is not available
: SSL_CTX_use_certificate_chain_file("/usr/local/etc/nginx/ssl/server.pem") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib)
конфиг:
ssl on;
ssl_certificate /usr/local/etc/nginx/ssl/server.pem;
ssl_certificate_key /usr/local/etc/nginx/ssl/server.key;
ssl_session_timeout 5m;
ssl_protocols SSLv2 SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
nginx version: nginx/0.8.29
OS: FreeBSD ... 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May 1 08:49:13 UTC 2009
Posted at Nginx Forum: http://forum.nginx.org/read.php?21,29009,29009#msg-29009
Подробная информация о списке рассылки nginx-ru