nginx + ssl

mikhail123 nginx-forum на nginx.us
Вт Дек 8 23:52:45 MSK 2009


Обновил порты, пересобрал nginx.

Такая ошибка:

: nginx was built with SNI support, however, now it is linked dynamically to an OpenSSL library which has no tlsext support, therefore SNI is not available
: SSL_CTX_use_certificate_chain_file("/usr/local/etc/nginx/ssl/server.pem") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib)

конфиг:
        ssl                  on;
        ssl_certificate      /usr/local/etc/nginx/ssl/server.pem;
        ssl_certificate_key  /usr/local/etc/nginx/ssl/server.key;

        ssl_session_timeout  5m;

        ssl_protocols  SSLv2 SSLv3 TLSv1;
        ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
        ssl_prefer_server_ciphers   on;



nginx version: nginx/0.8.29

OS: FreeBSD ... 7.2-RELEASE FreeBSD 7.2-RELEASE #0: Fri May  1 08:49:13 UTC 2009

Posted at Nginx Forum: http://forum.nginx.org/read.php?21,29009,29009#msg-29009




Подробная информация о списке рассылки nginx-ru