Re: Does ssl_trusted_certificate actually send certs to client?

2015-03-02 Thread shumisha
Hi Maxim, Just did that and work fine for me! The warning "chain contains anchor" is gone from qualys ssl test page, while OCSP stapling is on, as well as ssl_stapling_verify. Side note: after applying this patch, I realized my config was actually wrong: the ssl_certificate file was indeed lackin

Re: Does ssl_trusted_certificate actually send certs to client?

2015-03-01 Thread shumisha
Hi I'm facing this problem as well, though in a different context: OCSP stapling. Everything looks good without OCSP stapling: my ssl_certificate file contain my domain (wildcard) cert from AlphaSSL, that doesn't require any intermediate cert, so the domain cert is the only one in that file. Howev

Re: Issue with auto subdomain nd trailing slash

2013-02-22 Thread shumisha
Hi Francis, Thanks a lot for your message, I think I got things under control thanks to you! You're right, there's indeed a 301 thrown by nginx from http://subdomain..net/admin to http://.net/admin/ (as shown by the curl output). I had tried server_name_in_redirect to off before, to no a

Issue with auto subdomain nd trailing slash

2013-02-22 Thread shumisha
Hi All, I am running into a weird issue, after having configured nginx 0.7.67 (comes with debian 6) for serving PHP pages, with automatic subdomains. It works fine for the most part, but when requesting a url that correspond to an actual folder, but without a trailing slash, the subdomain recognit