NGINX http-secure-link 403 !!

shahzaib mushtaq shahzaib.cb at gmail.com
Wed Aug 3 15:38:36 UTC 2016


Hi,

We've configured nginx --with-http_secure_link_module to secure the mp4
links. Currently we're testing it with very basic settings. Following is
brief explanation of our lab :

A test.mp4 file is located under directory /tunefiles/files/test.mp4 . Our
objective is to access this file over secure link such as

 http://192.168.1.192/files/test.mp4?md5=XXXXXX&expire=2314444 .

Here is the config of http-secure-link :

http://pastebin.com/N41WQASj

We've constructed the md5 & expire using following commands :

#expiry date is 31st december
$date -d "2016-12-31 23:59" +%s
1470240179

#md5
$echo -n '1470240179/files/test.mp4 secret' | openssl md5 -binary | openssl
base64 | tr +/ -_ | tr -d =
fY8Iyuqah9coPxTDk-UvVg


Once everything is constructed, we loaded the following URL into the
browser & encountered the error 403:

http://192.168.1.192/files/test.mp4?md5=fY8Iyuqah9coPxTDk-UvVg&expire=1470240179



This is what we got in error-log :

2016/08/03 19:58:27 [error] 1227#1227: *1 open()
"/etc/nginx/html/favicon.ico" failed (2: No such file or directory),
client: 192.168.1.12, server: _, request: "GET /favicon.ico HTTP/1.1",
host: "192.168.1.192", referrer: "
http://192.168.1.192/files/test.mp4?md5=fY8Iyuqah9coPxTDk-UvVg&expire=1470240179
"

======================================================================

We're unable to get rid of this 403 so far & need help on where we're doing
wrong ?

Thanks for help in advance !!

Regards.
Shahzaib
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20160803/0106900a/attachment.html>


More information about the nginx mailing list