Глюк с https.

[maxhl at hitline.net.ua]

Вечер добрый.

Настроил nginx на wmvare и положил phpmyadmin в каталог sql заходит видно
все нормально но при попытке ввести логин и пас ссылка  https
<https://vm/sql/> ://vm/sql/ чудесным образом превращается в 

http <http://vm:443/sql/index.php?token=cd64e93abfcd2e167536632a63aa5343>
://vm:443/sql/index.php?token=cd64e93abfcd2e167536632a63aa5343  тоесть
происходит переход на http

Естественный вопрос, а где я накосячил?

И еще вопрос почему

default: ssl_ciphers ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

Чем так не люб ADH? И какой алгоритм рекомендуете
(скорость/ресурсоемкость/надежность) использовать ?

 

Конфиг такой:

 

 

user  www www;

worker_processes  1;

pid        /var/run/nginx.pid;

error_log /home/logs/nginx_443_error.log info;

#error_log /home/logs/nginx_443_error.log debug;

 

events {    worker_connections  1024; }

 

http {

    include       mime.types;

    default_type  application/octet-stream;

    sendfile       on;

    tcp_nopush     on;

    tcp_nodelay    on;

 

    open_file_cache          max=1000  inactive=20s;

    open_file_cache_valid    30s;

    open_file_cache_min_uses 2;

    open_file_cache_errors   on;

 

    client_body_temp_path /mnt/md0;

    fastcgi_temp_path /mnt/md0;

 

    gzip on;

    gzip_min_length 1100;

    gzip_buffers 4 8k;

    gzip_types text/plain;

    output_buffers 1 32k;

    postpone_output 1460;

    keepalive_timeout 75 20;

 

    fastcgi_connect_timeout 30;

    fastcgi_send_timeout 600;

    fastcgi_read_timeout 600;

    fastcgi_buffer_size 32k;

    fastcgi_buffers 4 32k;

    fastcgi_busy_buffers_size 32k;

    fastcgi_temp_file_write_size 32k;

    fastcgi_intercept_errors on;

 

    server {

       listen 192.168.174.131:80;

       server_name vm 192.168.174.131 default;

        access_log /home/logs/access_80.log combined;

        error_log /home/logs/error_80.log info;

        root /home/htdocs;

        index index.pl index.php index.html index.cgi ;

               location / {

                    autoindex  on;

                    root /home/htdocs;

               }

                location ~ .php$ {

                    set $path_info $fastcgi_script_name;

                    set $real_script_name $fastcgi_script_name;

                    if ($fastcgi_script_name ~ "(.+?.php)(/.+)$") {

                        set $real_script_name $1;

                        set $path_info $2;

                    }

                    fastcgi_param SCRIPT_FILENAME
/home/htdocs$real_script_name;

                    fastcgi_param SCRIPT_NAME $real_script_name;

                    fastcgi_param PATH_INFO $path_info;

                    fastcgi_pass unix:/mnt/md0/php-fcgi.sock;

                    include  /usr/local/nginx/conf/phpcgi.conf;

                }

 

                location /sql {

                    index index.php;

                }

    }

 

    server {

 

        listen 192.168.174.131:443;

server_name vm 192.168.174.131 default;

        access_log /home/logs/access_443.log combined;

        error_log /home/logs/error_443.log info;

        root /home/htdocs;

        index index.pl index.php index.html index.cgi ;

 

        ssl                  on;

        ssl_protocols        SSLv3 TLSv1;

        ssl_ciphers
AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;

        ssl_certificate      /usr/local/nginx/conf/server.crt;

        ssl_certificate_key  /usr/local/nginx/conf/server.key;

        ssl_session_cache    shared:SSL:10m;

        ssl_session_timeout  10m;

 

      location / {

                    autoindex  on;

                    root /home/htdocs;

               }

                location ~ .php$ {

                    set $path_info $fastcgi_script_name;

                    set $real_script_name $fastcgi_script_name;

                    if ($fastcgi_script_name ~ "(.+?.php)(/.+)$") {

                        set $real_script_name $1;

                        set $path_info $2;

                    }

                    fastcgi_param SCRIPT_FILENAME
/home/htdocs$real_script_name;

                    fastcgi_param SCRIPT_NAME $real_script_name;

                    fastcgi_param PATH_INFO $path_info;

                    fastcgi_pass unix:/mnt/md0/php-fcgi.sock;

                    include  /usr/local/nginx/conf/phpcgi.conf;

                }

 

 

 

                location /sql {

                    index index.php;

                }

    }

 

 

 

}

 

 

 

С уважением Max.

maxhl at hitline.net.ua 71006063

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://nginx.org/pipermail/nginx-ru/attachments/20090211/aa043171/attachment.html>