Re: Selection of secure virtual servers

2015-11-18 Thread Francis Daly
On Mon, Nov 16, 2015 at 04:51:29PM +0300, Maxim Dounin wrote: > On Sun, Nov 15, 2015 at 12:51:56PM +, Francis Daly wrote: > > On Fri, Nov 13, 2015 at 03:37:28PM +0100, Joó Ádám wrote: Hi there, > > > I would like to terminate TLS connections arriving at the default > > > server, only serving

Re: Selection of secure virtual servers

2015-11-16 Thread Joó Ádám
Francis, Maxim, Thank you for the answers. Ádám ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Selection of secure virtual servers

2015-11-16 Thread Maxim Dounin
Hello! On Fri, Nov 13, 2015 at 03:37:28PM +0100, Joó Ádám wrote: > Hi, > > I would like to terminate TLS connections arriving at the default > server, only serving requests with the correct host header, relying on > SNI. > > The configuration is as follows: > > server { > listen 80

Re: Selection of secure virtual servers

2015-11-16 Thread Maxim Dounin
Hello! On Sun, Nov 15, 2015 at 12:51:56PM +, Francis Daly wrote: > On Fri, Nov 13, 2015 at 03:37:28PM +0100, Joó Ádám wrote: > > Hi there, > > > I would like to terminate TLS connections arriving at the default > > server, only serving requests with the correct host header, relying on > > S

Re: Selection of secure virtual servers

2015-11-15 Thread Francis Daly
On Fri, Nov 13, 2015 at 03:37:28PM +0100, Joó Ádám wrote: Hi there, > I would like to terminate TLS connections arriving at the default > server, only serving requests with the correct host header, relying on > SNI. SSL is fiddly. The selection of which https server{} to use is not as straightf

Re: Selection of secure virtual servers

2015-11-13 Thread Joó Ádám
Hi Nick, I have already tried those, same results. Á ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Selection of secure virtual servers

2015-11-13 Thread Nick Lopez
Try this more explicit configuration for your default SNI server: server { listen 80 default_server; listen 443 ssl default_server; # server_name _; return 444; } See here for more info on "server_name _;" and the default_server selector for the listen directive, including an example sim

Selection of secure virtual servers

2015-11-13 Thread Joó Ádám
Hi, I would like to terminate TLS connections arriving at the default server, only serving requests with the correct host header, relying on SNI. The configuration is as follows: server { listen 80; listen 443 ssl; return 444; } server { listen 80;