Re: ssl_dhparam with Wildcard SSL

2020-03-19 Thread q1548
Thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287383,287393#msg-287393 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Nginx SSL reverse proxy with independent authentication for each backend web server

2020-03-19 Thread Thomas Ward
You can specify different auth_basic configurations per server or per location match. Refer to the documentation - http://nginx.org/en/docs/http/ngx_http_auth_basic_module.html - which shows that the auth_basic config options can be at the http, server, location, or limit_except levels of the conf

Re: ssl_dhparam with Wildcard SSL

2020-03-19 Thread Thomas Ward
The dhparam file cam be whichever you want it to be **provided that** you configure it per server block. Refer to the config documentation - http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_dhparam - and the 'context' being 'http' or 'server' - you can define different dhparam files for

Re: ssl_dhparam with Wildcard SSL

2020-03-19 Thread q1548
need helps for this, thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,287383,287390#msg-287390 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

RE: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-03-19 Thread Reinis Rozitis
> After using 1.1.1e, see also the commit where an explicit entry has been > added. > nginx just reports back what openssl passes, if this was unexpected (none > critical) nginx needs to be patched, if not this openssl workaround (10880) > needs to be changed. Any comment on this from any nginx de

Question about root path for php-fpm

2020-03-19 Thread Mahmood Naderan
Hi I am following a document but something seems to be a typo and I want to be sure about that. 1) It says: In the webserver root directory, we will install the Olio PHP application, we will call this directory $APP_DIR: o cd /webserver/root/dir (e.g. /home/username/htdocs/ created when we install

Nginx SSL reverse proxy with independent authentication for each backend web server

2020-03-19 Thread Roberto Carna
Hi people, I wanna use NGINX as a SSL reverse proxy for several backends Apache web servers which listens on port TCP/8080 and TCP/9090. The NGINX reverse proxy must have one independent authentication for each backend web server: NGINX -- Auth 1 --- Web server 1 ports 8080/9090 -- A

Re: ssl_dhparam with Wildcard SSL

2020-03-19 Thread q1548
Hello Maxim, Thanks for your helps. "http level...", Oh, not just a hardware server, several different dedicated servers. When wildcard SSL is used, the CRT file and the KEY file should be the same in each hardware server, I just want to know, can each server use its private dhparam file or must

Re: ssl_dhparam with Wildcard SSL

2020-03-19 Thread Maxim Dounin
Hello! On Thu, Mar 19, 2020 at 05:42:28AM -0400, q1548 wrote: > I want to use a Wildcard SSL on several servers. > > "ssl_certificate" and "ssl_certificate_key" are same CRT file and KEY file, > but for "ssl_dhparam", each server have its private dhparam file? or use the > same dhparam file? ple

ssl_dhparam with Wildcard SSL

2020-03-19 Thread q1548
Hello, I want to use a Wildcard SSL on several servers. "ssl_certificate" and "ssl_certificate_key" are same CRT file and KEY file, but for "ssl_dhparam", each server have its private dhparam file? or use the same dhparam file? please help, thanks. Posted at Nginx Forum: https://forum.nginx.org