proxy SSL redirects

[Igor Sysoev]

On Thu, Jan 22, 2009 at 12:14:17AM +0200, Pavel Ivashkov wrote:

> Hello all,
> 
>   I have configured nginx-0.7.31 to proxy SSL requests (see config
>   below; and yes - I need SSL on the back-end as well as on the
>   front-end).
>   
>   While it perfectly works for cia back-end, I have an issue with
>   paypal: the first request to https://ahchoo:2443/ redirects user to
>   https://www.paypal.com/.
> 
>   Any suggestions on what have I missed?
> 
>   nginx.conf:
>   ===================
> worker_processes  1;
> error_log logs/error.log debug;
> 
> events {
>     worker_connections  1024;
> }
> 
> 
> http {
>     include       mime.types;
>     default_type  application/octet-stream;
> 
>     access_log  logs/access.log;
> 
>     sendfile        on;
>     keepalive_timeout  65;
> 
>     #gzip  on;
> 
>     upstream paypal {
>       server  www.paypal.com:443;
>     }
>     upstream cia {
>       server  www.cia.gov:443;
>     }
> 
>     server {
>         listen       2443;
>         server_name  ahchoo;
> 
>         ssl                  on;
>         ssl_certificate      ssl/ahchoo.crt;
>         ssl_certificate_key  ssl/ahchoo.key;
> 
>         location / {
>             proxy_pass https://paypal;
>             proxy_redirect    default;

You should either use

             proxy_pass      https://www.paypal.com/;
             proxy_redirect  default;

without upstream block, or

             proxy_pass      https://paypal;
             proxy_redirect  https://www.paypal.com/  /;

as
             proxy_redirect  default;

means in this case

             proxy_redirect  https://paypal   /;

>         }
>     }
> 
> }
>   ===================
> 
>   
> 
> -- 
>  pavel                mailto:sup6542 at mail.ru
> 

-- 
Igor Sysoev
http://sysoev.ru/en/