proxy https to IIS

[Lan Tran]

----- Original Message ----- 
From: "Igor Sysoev" <is at rambler-co.ru>
To: <nginx at sysoev.ru>
Sent: Wednesday, February 14, 2007 1:56 PM
Subject: Re: proxy https to IIS


> On Wed, Feb 14, 2007 at 01:50:04PM -0500, Lan Tran wrote:
>
>> I'd like to proxy https traffic to an IIS server.  I've imported the cert
>> and server key from IIS to nginx.  I'm experiencing timeouts.  Can nginx 
>> do
>> what I want?
>> Debug does not show much info.  Below is my config:
>>
>> worker_processes  2;
>> #error_log  logs/error.log debug;
>> error_log  logs/error.log info;
>> pid        logs/nginx.pid;
>> events {
>>    worker_connections  1024;
>> }
>>
>> http {
>>    include       conf/mime.types;
>>    default_type  application/octet-stream;
>>    log_format  main  '$remote_addr - $remote_user [$time_local] $status '
>>                      '"$request" $body_bytes_sent "$http_referer" '
>>                      '"$http_user_agent" "http_x_forwarded_for"';
>>    access_log  logs/access.log  main;
>>    sendfile       on;
>>    tcp_nopush     on;
>>    tcp_nodelay    on;
>>
>> server {
>>        listen       443;
>>        server_name     www.domain.com;
>>        keepalive_timeout    70;
>>        ssl                  on;
>>        ssl_certificate      /usr/local/nginx/conf/ssl/server.crt;
>>        ssl_certificate_key  /usr/local/nginx/conf/ssl/server.key;
>>        ssl_session_cache    shared:SSL:10m;
>>        ssl_session_timeout  10m;
>>        access_log  logs/access.log  main;
>>        ssl_protocols  SSLv2 SSLv3 TLSv1;
>>        ssl_ciphers
>> ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
>>        ssl_prefer_server_ciphers   on;
>>        # Main location
>>        location / {
>>            proxy_pass         https://192.168.1.3:443/;
>>            proxy_redirect     off;
>>            proxy_set_header   Host             $host;
>>
>>   }
>>
>> }
>
> proxy_pass to https is currently broken.
> Why do you want to use HTTPS between nginx and IIS ?
>
Because http is already being proxied to IIS so I thought I might as well 
proxy https too.  Do you know when proxy_pass to https will be fixed?
Thanks!
LT