ssl on different servers

[Axel]

Hi,

it sounds as if you want to proxy your ssl request to another server and 
terminate it there?! You cannot do this.

You need to establish a ssl connection first before you can use http/s.

regards,
Axel


Am 02.10.2013 03:18, schrieb dossi:
> Hi,
> My domain.com is on ip: x.x.x.x
> where I have a configuration like:
> 
> server {
>    server_name  sub.domain.com;
>    location / {
> 
>       proxy_pass http://y.y.y.y;
> 
>       proxy_set_header X-Real-IP $remote_addr;
>       proxy_set_header Host $host;
>       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>     }
> 
> On ip y.y.y.y my configuration is:
> 
> server {
>    server_name  sub.domain.com;
>    location / {
> 
>       proxy_pass http://localhost:8080;
> 
>       proxy_set_header X-Real-IP $remote_addr;
>       proxy_set_header Host $host;
>       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>     }
> 
> That's fine!
> 
> But...
> 
> I'm trying to add ssl support, I bought a wildcard certificate but
> unfortunately I'm struggling with the configuration.
> 
> I changed the config on x.x.x.x:
> 
> server {
>    server_name  sub.domain.com;
>    location / {
>       proxy_pass http://y.y.y.y;
> 
>       proxy_set_header X-Forwarded-Proto https;
> 
>       proxy_set_header X-Real-IP $remote_addr;
>       proxy_set_header Host $host;
>       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>     }
>  listen 443;
>  ssl_certificate ssl.crt;
>  ssl_certificate_key my.key;
> }
> 
> and I changed the config on y.y.y.y:
> 
> server {
>    server_name  sub.domain.com;
>    location / {
>       proxy_pass http://localhost:8080;
>       proxy_set_header X-Real-IP $remote_addr;
>       proxy_set_header Host $host;
>       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>     }
> 
>        listen 443 ssl;
>        ssl_certificate      ssl.crt;
>        ssl_certificate_key  my.key;
> }
> 
> I also tried other configuration, but I cannot make it working.
> 
> Can you help me, please?
> 
> Thanks
> 
> Dossi
> 
> Posted at Nginx Forum:
> http://forum.nginx.org/read.php?2,243340,243340#msg-243340
> 
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx