Re: Endless HTTP auth attempts without 5xx error? [was: Basic HTTP auth prompting too many times]

2015-04-05 Thread E.B.
Sorry I guess I meant 401 instead of 5xx? Well, same question tho. by the way, i changed to nginx basic_auth and when I enter wrong credentials, it allows me endless tries.  i'm was used to apache gives a 5xx page after three bad tries.  i gues

Endless HTTP auth attempts without 5xx error? [was: Basic HTTP auth prompting too many times]

2015-04-05 Thread E.B.
by the way, i changed to nginx basic_auth and when I enter wrong credentials, it allows me endless tries. i'm was used to apache gives a 5xx page after three bad tries. i guess you could refresh that and try again in apache too, but endless tries without a error for nginx? is there a way to chan

Basic HTTP auth prompting too many times

2015-04-05 Thread E.B.
Hello, I have set up HTTP auth using the auth_pam module (although I'm not sure that module is the problem - it might be nginx problem). https://github.com/stogh/ngx_http_auth_pam_module/ All works great for a while After some time, browsers begin to prompt for authentication over and over

How to enable OCSP stapling when default server is self-signed?

2015-04-05 Thread bughunter
My web server is intentionally set up to only support virtual hosts and TLS SNI. I know that the latter eliminates some ancient web browsers but I don't care about those browsers. I want to enable OCSP stapling and it seems to be configured correctly in my test vhost (everything else about SSL al

Re: How often ssl_stapling_file picks up an updated file?

2015-04-05 Thread B.R.
If nginx manages those files like the others (like logs), it (re)opens them on reload/restart. You might tweak your updating script to also send a HUP signal to nginx. It would be recommanded to check the error log on reload, as errors (if any) will appear there. You might also simply use the ssl_

How often ssl_stapling_file picks up an updated file?

2015-04-05 Thread nanochelandro
Hey all. Before I file a bugreport I'd like to consult with community to make sure whether I get the whole thing right. I use ssl_stapling_file and update that file daily. Today I discovered that one of my SSL websites returns outdated OCSP response, not the one which is in the OCSP stapling file: