How to enable 3des in TLS 1.0 and Disable 3des TLS 1.1 and above in Nginx

2018-05-10 Thread Dhinesh Kumar T
How nginx enable 3des in TLS 1.0 and Disable 3des TLS 1.1 and above? Nginx: 1.12.2-1 OpenSSL: 1.0.2k-8 I have tried with creating multiple server, but that dint help. is there a way to do this? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,279755,279755#msg-279755 _

Re: No shared cipher

2018-05-10 Thread _gg_
Indeed, I have an EC certificate. Thanks. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,279727,279754#msg-279754 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Nginx Proxy/FastCGI Caching X-Accel-Expires 0 or Off ?

2018-05-10 Thread c0nw0nk
So in order for my web application to tell Nginx not to cache a page what header response should I be sending ? X-Accel-Expires: 0 X-Accel-Expires: Off I read here it should be "OFF" https://www.nginx.com/resources/wiki/start/topics/examples/x-accel/#x-accel-expires But it does not mention if nu

Load balancing

2018-05-10 Thread Friscia, Michael
I’m working on a project to perform A/B testing with the web hosting platform. The simple version is that we are hosted everything on Azure and want to compare using their Web Apps versus running a VM with IIS. My question is about load balancing since there seems to be two ways to go about thi

Re: No shared cipher

2018-05-10 Thread Maxim Dounin
Hello! On Wed, May 09, 2018 at 02:10:04AM -0400, _gg_ wrote: > Not sure if it's not more of an openssl/TLS 'issue'/question... > For some time I've been observing > > SSL_do_handshake() failed (SSL: error:1408A0C1:SSL > routines:ssl3_get_client_hello:no shared cipher) while SSL handshaking >

No live upstreams

2018-05-10 Thread Jean-Paul Hemelaar
Hi! I'm using Nginx as a proxy to Apache. I noticed some messages in my error.log that I cannot explain: 27463#0: *125209 no live upstreams while connecting to upstream, client: x.x.x.x, server: www.xxx.com, request: "GET /xxx/ HTTP/1.1", upstream: " http://backend/xxx/";, host: "www.xxx.com" Th

Re: Set real ip not working

2018-05-10 Thread snir
Thanks That what I needed location / { proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_pass http://myapp1; } Posted at Nginx Fo

Possible to use RHEL / CentOS repo on Fedora 28?

2018-05-10 Thread Danny Horne via nginx
Hi all, I'm running Fedora 28 Server, and in the default repos Nginx is lagging behind at 1.12.1, I found the following on the Nginx website - To set up the yum repository for RHEL/CentOS, create the file named |/etc/yum.repos.d/nginx.repo| with the following contents: [nginx] name=nginx

Re: Proxy pass and SSL certificates

2018-05-10 Thread Joncheski
Hello Meph, Not, exactly this has SSL. Here's a suggestion configuration: nginx.conf: -- user nginx; worker_processes auto; error_log /var/log/nginx/cloudssl.diakont.it.error.log; events { work