nginx-0.7.14

CryptWizard cryptwizard at gmail.com
Wed Sep 3 16:53:09 MSD 2008


So does that mean that on my non-default servers I can just add listen
443; to it and it will work, and I still don't need two server blocks
for each actual server+

On Wed, Sep 3, 2008 at 11:29 PM, Igor Sysoev <is at rambler-co.ru> wrote:
> On Wed, Sep 03, 2008 at 11:19:00PM +1100, CryptWizard wrote:
>
>> Aww...
>> Can you make it work for non-default listen directives as well?
>
> "listen default" means that you define listen(2) and bind(2) parameters.
> "ssl" is not listen/bind(2) parameter, but anyway all servers listening
> on this port must accept SSL connections only.
>
>> On Tue, Sep 2, 2008 at 5:05 PM, Igor Sysoev <is at rambler-co.ru> wrote:
>> > On Tue, Sep 02, 2008 at 08:45:07AM +1000, CryptWizard wrote:
>> >
>> >> That's excellent.
>> >> Now I don't need to have 2 almost identical server blocks and make
>> >> changes in 2 places every time.
>> >> Just waiting for the FreeBSD port to come out.
>> >
>> > This is recommended for sites where difference between HTTP and HTTPS
>> > is small as comprared to whole sites configuration:
>> >
>> >        server {
>> >            listen  80;
>> >            listen  443 default ssl;
>> >
>> >            server_name  www.example.com;
>> >
>> >            ssl_certificate       /path/to/cert;
>> >            ssl_certificate_key   /path/to/key;
>> >
>> >            location / {
>> >                ...
>> >            }
>> >
>> >            location /ssl/only/dir/ {
>> >                if ($scheme = http) {
>> >                    rewrite  ^(.+)$   https://www.example.com$1;
>> >                }
>> >                ...
>> >            }
>> >
>> >        }
>> >
>> >
>> >
>> >> On Tue, Sep 2, 2008 at 8:33 AM, Maxim Dounin <mdounin at mdounin.ru> wrote:
>> >> > Hello!
>> >> >
>> >> > On Tue, Sep 02, 2008 at 08:07:57AM +1000, CryptWizard wrote:
>> >> >
>> >> >>>   *) Feature: the "listen" directive supports the "ssl" parameter.
>> >> >>
>> >> >> How is it used? Is there an example available?
>> >> >
>> >> > In russian it's here:
>> >> > http://www.sysoev.ru/nginx/docs/http/ngx_http_core_module.html#listen
>> >> >
>> >> >    server {
>> >> >        listen  80;
>> >> >        listen  443 ssl;
>> >> >
>> >> >        ...
>> >> >    }
>> >> >
>> >> > It allows using the same server{} for http and https.
>> >> >
>> >> > Maxim Dounin
>> >
>> >
>> > --
>> > Igor Sysoev
>> > http://sysoev.ru/en/
>> >
>> >
>
> --
> Igor Sysoev
> http://sysoev.ru/en/
>
>





More information about the nginx mailing list