Re: nginx mail proxy - dovecot ssl backend

2014-09-05 Thread useopenid
Thanks! I setup stunnel in the interim, but this will be more efficient. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,219069,253106#msg-253106 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: urgent need help ,ssl error ;

2014-09-05 Thread Miguel Clara
Seems like "/etc/nginx/ssl/server.crt" content is not correct ("no start line error), maybe a bad copy paste? Melhores Cumprimentos // Best Regards --- *Miguel Clara* *IT - Sys Admin & Developer* *E-mail:*miguelmcl...@gmail.com www.linkedin

Re: urgent need help ,ssl error ;

2014-09-05 Thread vk1dadhich
One most imporatant thing, we site working with https from 2 months but after configuer the sftp with openssl , it created the problem. i did the old settings of sshd_config, as it is as its worked, but still facing the issue. Posted at Nginx Forum: http://forum.nginx.org/read.php?2,253088,25309

urgent need help ,ssl error ;

2014-09-05 Thread vk1dadhich
Hi Team, I am facing a issue regarding the ssl in nginx , find below the error logs : 2014/09/05 19:23:36 [emerg] 18774#0: SSL_CTX_use_PrivateKey_file("/etc/nginx/ssl/server.crt") failed (SSL: error:0906D06C:PEM routines:PEM_read_bio:no start line error:140B0009:SSL routines:SSL_CTX_use_PrivateK

Re: RE: NGINX SSL passthrough without certificate

2014-09-05 Thread OzJD
Lukas, I think you're right. The combination of three may be optimal at this time. I'll see what I come up with - I hadn't heard of the PROXY protocol before (was thinking of something similar though). That's made my life plenty easier! Thanks mate :-) Posted at Nginx Forum: http://forum.nginx

RE: NGINX SSL passthrough without certificate

2014-09-05 Thread Lukas Tribus
Hi, > Hi Lukas, > > While HAProxy is able to do some of those things (not sure about > X-FORWARDED-FOR workarounds?) Yes, haproxy supports and pushes the PROXY protocol for this exact reason. > I'd still prefer to use NGINX where possible > (for other reasons, such as PageSpeed support, etc)

Re: RE: NGINX SSL passthrough without certificate

2014-09-05 Thread OzJD
Hi Lukas, While HAProxy is able to do some of those things (not sure about X-FORWARDED-FOR workarounds?), I'd still prefer to use NGINX where possible (for other reasons, such as PageSpeed support, etc) Is NGINX able to do any of the things mentioned in the question? Specifically, can it sort by

RE: NGINX SSL passthrough without certificate

2014-09-05 Thread Lukas Tribus
Hi, > We currently have a backend server that listens for SSL requests, and (using > SNI) chooses to pass them on to the correct place, or alternatively will > serve the requested HTTPS. > > Our current configuration is slow (not painfully, just slower than we'd > like), and we figured having NGI

NGINX SSL passthrough without certificate

2014-09-05 Thread OzJD
We currently have a backend server that listens for SSL requests, and (using SNI) chooses to pass them on to the correct place, or alternatively will serve the requested HTTPS. Our current configuration is slow (not painfully, just slower than we'd like), and we figured having NGINX do some of the