RE: Different certificates and keys for server and client verification

2018-02-09 Thread Jason Whittington
Yes - SSL and Client certs are completely orthogonal. However nginx needs to know about whatever cert is used to sign the client certs. Each client can't create completely distinct self-signed certs; they have to be signed by an issuer that nginx trusts. The blog posts at [1] and [2] do a pr

Different certificates and keys for server and client verification

2018-02-09 Thread spacerobot
Hi, I want my nginx listener to use SSL and do both server and client verification. However, I want it to use different certificates and keys for server vs client verification. The reason is that I want to use a properly signed certificate for the server verification and a self signed certificate

Unit 0.6 beta release

2018-02-09 Thread Valentin V. Bartenev
Hello, I'm glad to announce a new beta of NGINX Unit with advanced process management and Perl/PSGI support. One of the Perl applications that has been tested is Bugzilla and it run with Unit flawlessly. Here is a changes log of 0.5 and 0.6 versions: Changes with Unit 0.5

Re: How is the progress to support DTLS

2018-02-09 Thread aperfectman
Hello Maxim, Yes, I tested it based on the instruction but it didn't work. The error was "DTLSv1_listen error -1 (SSL: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher) while SSL handshaking, udp client: 127.0.0.1..." However, with the same key, it worked with goldy https://de

Re: How is the progress to support DTLS

2018-02-09 Thread Maxim Konovalov
Hi Ted, On 09/02/2018 10:44, aperfectman wrote: > Hello team, > > I am looking for a loader balancer to support DTLS on UDP and found that > there is experimental DTLS support in specific version 1.13.0 Nginx. > http://nginx.org/patches/dtls/README.txt > > Just curious about the progress of rel

Re: HTTP/2 server push

2018-02-09 Thread beatnut
Thank you for an answer. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,278415,278435#msg-278435 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx