problem with ssl

James thenetimp at gmail.com
Sun Sep 7 02:27:49 MSD 2008


Hi I am new to nginx.  I am running Fedora Core 8 and have installed  
nginx from source.   I am planning on using it for it's load balancing  
ability.  I have it set up and working for port 80 and it is working  
very nicely, but when I try to configure it for SSL I get an error.

Here is my error:
2008/09/06 18:13:19 [emerg] 9761#0: unknown directive "ssl" in /usr/ 
local/nginx/conf/nginx.conf:39

Here is my config:

     server {
         listen 443;
         server_name prod2.domain.com;

         ssl                  on;
         ssl_certificate      /usr/local/nginx/conf/ssl/ 
domain.com.myCA.merged.crt;
         ssl_certificate_key  /usr/local/nginx/conf/ssl/domain.com.key;
         keepalive_timeout    70;

         location / {
             proxy_pass https://domainmain;
         }
     }

I have merged my CA intermediary cert with my server sert.  Line 40 is  
the "ssl on" line.

Here are my comfigure arguments:

strings `which nginx` | grep 'configure arguments'
configure arguments: --user=nginx --group=nginx --prefix=/usr/share/ 
nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf -- 
error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/ 
access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body  
--http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp- 
path=/var/lib/nginx/tmp/fastcgi --pid-path=/var/run/nginx.pid --lock- 
path=/var/lock/subsys/nginx --with-http_ssl_module --with- 
http_realip_module --with-http_addition_module --with-http_sub_module  
--with-http_dav_module --with-http_flv_module --with- 
http_gzip_static_module --with-http_stub_status_module --with- 
http_perl_module --with-mail --with-mail_ssl_module --with-cc-opt=-O2 - 
g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector -- 
param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous- 
unwind-tables --add-module=/builddir/build/BUILD/nginx-0.6.31/nginx- 
upstream-fair

Could someone help me figure out of ssl is properly compiled and and/ 
or tell me if this part of my config is ok?

Thanks,
James








More information about the nginx mailing list