Getting 302 Response

Hi Team, I have a nginx configuration file in /etc/nginx/default.d directory. I am using dynamic upstream, but I am getting 302 response on my nginx server. Below is the upstream and rewrite rule details: = resolver 172.29.92.2 valid=60s; set

Re: Securing URLs with the Secure Link Module in NGINX

On Mon, Jun 17, 2019 at 03:17:46PM +, Andrew Andonopoulos wrote: Hi there, > Regarding the map, can you please explain which values the variables $one and > $the_md5 will have? Yes, but: what happens when you try it? On a test system: location /vod/ { return 200 "one is $one; the_md

Re: Securing URLs with the Secure Link Module in NGINX

How to compile this module into nginx is provided in readme, also on Github. You can also compile it dynamically and load into nginx if you are using recent version of nginx, how to do it also included in readme, I guess. Regarding Akamai, this module was made to work with various cdn provider, b

Re: Securing URLs with the Secure Link Module in NGINX

Hi Francis, Regarding the map, can you please explain which values the variables $one and $the_md5 will have? My understanding of map directive is, request_uri will have the whole URI and will try to match it as per the regex. If there is a match then will pass the value to $one which will pass

Re: Securing URLs with the Secure Link Module in NGINX

On Mon, Jun 17, 2019 at 01:34:33PM +, Andrew Andonopoulos wrote: Hi there, > The idea of moving MD5 and Time after the first directory is good. > So with this option i will not have to worry modifying the manifests. Correct. Since the manifests refer to "other files in the same directory",

Re: Nginx ssl_trusted_certificate directive problem

Hello! On Fri, Jun 14, 2019 at 06:09:22AM -0400, niegus wrote: > Hi, > > I have my nginx configured with client_certificate authentication: > > ssl_client_certificate /etc/nginx/ssl/cas.pem; > ssl_verify_client optional; > ssl_verify_depth 2; > And is working fine, but I need to NOT send the

Re: Securing URLs with the Secure Link Module in NGINX

Hi Francis, The idea of moving MD5 and Time after the first directory is good. So with this option i will not have to worry modifying the manifests. If i use this URL: /vod/MD5/TIME/hls/directory/files The locations will be like this? location ^~ /vod/" secure_link $the_md5,$the_time; secu

Re: Securing URLs with the Secure Link Module in NGINX

also i don't have Akamai CDN behind nginx. Can i use this module without using other CDN ? Thanks Andrew From: Andrew Andonopoulos Sent: Monday, June 17, 2019 12:25 PM To: nginx@nginx.org Subject: Re: Securing URLs with the Secure Link Module in NGINX Hi Hung,

Re: Securing URLs with the Secure Link Module in NGINX

Hi Hung, I presume i need to re-compile nginx. I never installed a module before so i think i need to follow these steps: 1) get the module in the server, in the folder /tmp/ 2) compile nginx with this command: ./configure --add-module=/tmp/nginx-secure-token-module (this will be the module fol

Re: Content Security Policy - Nginx

Hi, I tried using inline script by allowing unsafe-inline in Content Security Policy header but am getting below error. Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'. Either the 'unsafe-inline' keyword, a hash ('sha

Re: Securing URLs with the Secure Link Module in NGINX

Hi, Actually you can use a module developed by Kaltura call secure token module (1). This module can examine your response to see its content-type, if it matches configured parameter, it will automatically inject secure params into hls playlist. Use this module, please note you dont use anythin

Re: Securing URLs with the Secure Link Module in NGINX

On Mon, Jun 17, 2019 at 08:17:51AM +, Andrew Andonopoulos wrote: Hi there, > I would like to add the secure link in each m3u8 and ts file but can't modify > the files on the fly with the free nginx version, i think nginx plus have > this capability ? (receive fmp4 and deliver manifests on t

Re: FIPS support in nginx?

On Fri, Jun 14, 2019 at 02:26:49PM -0400, tlemons wrote: > Hi > > Does nginx have a 'FIPS mode'? If so, where can I find this documented? > > Thanks! > tl > nginx uses openSSL library for all cryptographic operations. Thus it is enough to turn on FIPS mode in the library. For example, here [1] are

Re: Securing URLs with the Secure Link Module in NGINX

Hi Francis and thank you for your quick response / support. Now is more clear how locations and secure link works. I would like to add the secure link in each m3u8 and ts file but can't modify the files on the fly with the free nginx version, i think nginx plus have this capability ? (receive f

Re: Securing URLs with the Secure Link Module in NGINX

On Sat, Jun 15, 2019 at 06:08:07PM +, Andrew Andonopoulos wrote: Hi there, > In my case the player will request the m3u8 URL: > > https:///hls/justin-timberlake-encrypted/playlist.m3u8?md5=u808mTXsFSpZt7b8wLvlIw&expires=1560706367 > > The response from the server will be: > > #EXTM3U > #EX