Re: openssl 1.1.1e 14095126:SSL routines:ssl3_read_n

2020-04-01 Thread Thomas Stephen Lee
On Mon, Mar 23, 2020 at 6:05 PM Maxim Dounin wrote: > Hello! > > On Mon, Mar 23, 2020 at 02:04:36PM +0300, Sergey Kandaurov wrote: > > > > > > On 22 Mar 2020, at 21:39, itpp2012 > wrote: > > > > > > How about this as this catches all 3 while conditions: > > > > > > +++ src/event/ngx_event_openss

Re: Configure NGINX to deny web socket connections except for certain paths

2020-04-01 Thread teward
teward Wrote: --- > This works fine if > the web frontend is open to all, but we want to restrict it so that > only one WSS pathway can actually be used and no other WSS requests > work. To clarify, there's a separate `server { }` block handling

Configure NGINX to deny web socket connections except for certain paths

2020-04-01 Thread teward
This will sound a little odd, but we have an NGINX reverse proxy acting as an SSL termination point for a remote desktop web gateway from Microsoft. Currently, the primary Web Client ingress point is protected by SSL Client Certificates - you must have a valid SSL CLient Certificate to get to the