problem with ssl

[James]

Well hello. ;-)


On Sep 6, 2008, at 7:12 PM, Maxim Dounin wrote:

> Hello!
>
> On Sat, Sep 06, 2008 at 06:27:49PM -0400, James wrote:
>
>> Hi I am new to nginx.  I am running Fedora Core 8 and have  
>> installed  nginx from source.   I am planning on using it for it's  
>> load balancing  ability.  I have it set up and working for port 80  
>> and it is working  very nicely, but when I try to configure it for  
>> SSL I get an error.
>>
>> Here is my error:
>> 2008/09/06 18:13:19 [emerg] 9761#0: unknown directive "ssl" in / 
>> usr/ local/nginx/conf/nginx.conf:39
>>
>> Here is my config:
>>
>>    server {
>>        listen 443;
>>        server_name prod2.domain.com;
>>
>>        ssl                  on;
>>        ssl_certificate      /usr/local/nginx/conf/ssl/  
>> domain.com.myCA.merged.crt;
>>        ssl_certificate_key  /usr/local/nginx/conf/ssl/domain.com.key;
>>        keepalive_timeout    70;
>>
>>        location / {
>>            proxy_pass https://domainmain;
>>        }
>>    }
>>
>> I have merged my CA intermediary cert with my server sert.  Line 40  
>> is  the "ssl on" line.
>>
>> Here are my comfigure arguments:
>>
>> strings `which nginx` | grep 'configure arguments'
>
> JFYI: nginx -V does provide this information.
>
>> configure arguments: --user=nginx --group=nginx --prefix=/usr/ 
>> share/ nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/ 
>> nginx.conf --
>                                                ^^^^^^^^^^^^^^^^^^^^^
>
> Are you sure you are checking the same nginx you are running?  It  
> looks like the one you have checked with strings was compiled with '/ 
> etc/nginx/nginx.conf' default config, while the one you are running  
> uses '/usr/local/nginx/conf/nginx.conf' config.  Probably the  
> binaries differ and the latter one wasn't configured --with- 
> http_ssl_module.
>
> Maxim Dounin
>
>
>> error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/ 
>> nginx/ access.log --http-client-body-temp-path=/var/lib/nginx/tmp/ 
>> client_body  --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http- 
>> fastcgi-temp- path=/var/lib/nginx/tmp/fastcgi --pid-path=/var/run/ 
>> nginx.pid --lock- path=/var/lock/subsys/nginx --with- 
>> http_ssl_module --with- http_realip_module --with- 
>> http_addition_module --with-http_sub_module  --with-http_dav_module  
>> --with-http_flv_module --with- http_gzip_static_module --with- 
>> http_stub_status_module --with- http_perl_module --with-mail --with- 
>> mail_ssl_module --with-cc-opt=-O2 -g -pipe -Wall -Wp,- 
>> D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector -- param=ssp- 
>> buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-  
>> unwind-tables --add-module=/builddir/build/BUILD/nginx-0.6.31/ 
>> nginx- upstream-fair
>>
>> Could someone help me figure out of ssl is properly compiled and  
>> and/or tell me if this part of my config is ok?
>>
>> Thanks,
>> James
>>
>>
>>
>>
>