NGINX http-secure-link 403 !!
mdounin at mdounin.ru
Wed Aug 3 16:21:43 UTC 2016
On Wed, Aug 03, 2016 at 08:38:36PM +0500, shahzaib mushtaq wrote:
> We've configured nginx --with-http_secure_link_module to secure the mp4
> links. Currently we're testing it with very basic settings. Following is
> brief explanation of our lab :
> A test.mp4 file is located under directory /tunefiles/files/test.mp4 . Our
> objective is to access this file over secure link such as
> http://192.168.1.192/files/test.mp4?md5=XXXXXX&expire=2314444 .
> Here is the config of http-secure-link :
> We've constructed the md5 & expire using following commands :
> #expiry date is 31st december
> $date -d "2016-12-31 23:59" +%s
> $echo -n '1470240179/files/test.mp4 secret' | openssl md5 -binary | openssl
> base64 | tr +/ -_ | tr -d =
> Once everything is constructed, we loaded the following URL into the
> browser & encountered the error 403:
You are using "expire=" in the request, but "$arg_expires" in the
configuration. Note the trailing "s".
More information about the nginx