mail proxy to 3rd party using ssl

2013-09-02 Thread rmombassa
I am setting up nginx as POP3 mail proxy to two 3rd party mail servers. Different domains, one of them uses SSL. Since I do not have that 3rd party's SSL certificate I use my own company certificate in nginx. That cert is properly signed but obviousy belongs to another domain (our domain). If I c

Re: Transforming nginx for Windows

2013-09-02 Thread itpp2012
Found them, tnx, no adjustment needed here, it's dealing with the much larger FD table without problems. Got up to 12k concurrent connections today one worker one cpu at around 40% utilization, can't get beyond that yet due to the test tool not being able to go beyond 12k :) If anyone wants to tes

Re: SSL certificate chain

2013-09-02 Thread Daniel Lundqvist
So … mysteries solved. I believe. A few things was wrong for me: 1) I had a catch all virtual host using the same certificate file as main site (configured both with a "invalid" server name and default_server for both HTTP and HTTPS) 2) It seems virtual server is also selected based on CN/Subj

Re: SSL certificate chain

2013-09-02 Thread Steve Wilson
On 2013-09-02 11:59, Daniel Lundqvist wrote: I have, it just says only 1 certificate is provided. Here are the test results: https://www.ssllabs.com/ssltest/analyze.html?d=www.malarhojden.nu ... I note that you're using startcom for the certificate, I recall that the intermediate certificate t

Re: SSL certificate chain

2013-09-02 Thread Daniel Lundqvist
I have, it just says only 1 certificate is provided. Here are the test results: https://www.ssllabs.com/ssltest/analyze.html?d=www.malarhojden.nu -- daniel On 1 sep 2013, at 21:43, Sylvia wrote: > Hi. > You can try to run a diagnostics for problem discovery and recommendations > > https://ww

Re: Securing nginx: Workers per server block under specific user?

2013-09-02 Thread mex
how do you execute your php? if you reverse proxying to an apache you might use suphp, as usual: http://www.suphp.org/Home.html php-fpm has a similar option, as alex mentioned if you really need to define workers for each server, run an nginx-instance for each of your websites; you can define