TLS termineerimine nginx abil - Revision history

Mernits: /* Konfiguratsioon */

2014-04-24T07:50:47Z

Konfiguratsioon

← Older revision		Revision as of 10:50, 24 April 2014
Line 84:		Line 84:

	ssl_session_cache shared:SSL:10m;		ssl_session_cache shared:SSL:10m;
			ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;

			ssl_prefer_server_ciphers on;
			ssl_ciphers HIGH:!aNULL:!MD5;

2014-04-24T07:30:44Z

Nginx seadistamine

← Older revision		Revision as of 10:30, 24 April 2014
Line 13:		Line 13:



			= Apache seadistamine =
			Kui kasutate Nginx serverit TLS terminaatorina apache serveri ees, siis keelake ssl virtuaalsed hostid ja ssl moodul apache serveril.

			<pre>
			a2dissite sinu-virtualhosti-konfifail
			a2dismod ssl

			</pre>
	= Nginx seadistamine =		= Nginx seadistamine =

2014-04-14T09:55:20Z

Konfiguratsioon

2012-12-25T23:14:40Z

Kasutatud kirjandus

← Older revision		Revision as of 02:14, 26 December 2012
Line 98:		Line 98:

	https://wiki.itcollege.ee/index.php/Nginx		https://wiki.itcollege.ee/index.php/Nginx

	http://chase-seibert.github.com/blog/2011/12/21/nginx-ssl-reverse-proxy-tutorial.html		http://chase-seibert.github.com/blog/2011/12/21/nginx-ssl-reverse-proxy-tutorial.html

	https://wiki.itcollege.ee/index.php/Veebiserver_labor_2#SSL_keskkonna_loomine		https://wiki.itcollege.ee/index.php/Veebiserver_labor_2#SSL_keskkonna_loomine

2012-12-25T23:14:24Z

Sertifikaat

← Older revision		Revision as of 02:14, 26 December 2012
Line 27:		Line 27:
	Looge sertifikaat, privaatvõti ja eraldi kaust:		Looge sertifikaat, privaatvõti ja eraldi kaust:
	<pre>		<pre>
	sudo mkdir /usr/local/nginx		sudo mkdir /usr/local/nginx
	sudo mkdir /usr/local/nginx/conf		sudo mkdir /usr/local/nginx/conf
	cd /usr/local/nginx/conf		cd /usr/local/nginx/conf
	openssl req -nodes -new -keyout server.key -newkey rsa:1024 > server.csr		openssl req -nodes -new -keyout server.key -newkey rsa:1024 > server.csr
	</pre>		</pre>

Line 51:		Line 51:
	openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt		openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
	</pre>		</pre>



	==Konfiguratsioon==		==Konfiguratsioon==

2012-12-25T23:13:55Z

@@ Line 11: / Line 11: @@
 *[[varnish| Konfigureeritud ja töötav varnish.]]
 *Näites kasutatakse saidina www.mesilane.mm
 = Nginx seadistamine =
-Installeerige Nginx:
+==Paigaldamine==
-<pre>sudo apt-get install nginx</pre>
+<pre>sudo -s
 Looge kausta /etc/nginx/sites-enabled/ oma saidi nimeline tekstifail ning muutke seda vastavalt:
@@ Line 59: / Line 97: @@
-== Teema võetud ==
+= Kasutatud kirjandus =
 Sander Arnus
 Sander Saveli

2012-12-22T12:33:37Z

Nginx seadistamine

← Older revision		Revision as of 15:33, 22 December 2012
Line 20:		Line 20:
	Looge kausta /etc/nginx/sites-enabled/ oma saidi nimeline tekstifail ning muutke seda vastavalt:		Looge kausta /etc/nginx/sites-enabled/ oma saidi nimeline tekstifail ning muutke seda vastavalt:

	<pre>~~touch /etc/nginx/sites-enabled/www.mesilane.mm</pre>~~		<pre>nano /etc/nginx/sites-enabled/www.mesilane.mm</pre>

	~~<pre>nan0~~/etc/nginx/sites-enabled/www.mesilane.mm</pre>

	Näide, mis kasutab saidina www.mesilane.mm:		Näide, mis kasutab saidina www.mesilane.mm:

2012-12-22T12:08:35Z

Nginx seadistamine

← Older revision		Revision as of 15:08, 22 December 2012
Line 24:		Line 24:
	<pre>nan0/etc/nginx/sites-enabled/www.mesilane.mm</pre>		<pre>nan0/etc/nginx/sites-enabled/www.mesilane.mm</pre>

	Näide, mis kasutab ~~sidine~~ www.mesilane.mm:		Näide, mis kasutab saidina www.mesilane.mm:

	<pre>		<pre>

2012-12-22T12:08:10Z

Nginx seadistamine

← Older revision		Revision as of 15:08, 22 December 2012
Line 17:		Line 17:

	<pre>sudo apt-get install nginx</pre>		<pre>sudo apt-get install nginx</pre>

			Looge kausta /etc/nginx/sites-enabled/ oma saidi nimeline tekstifail ning muutke seda vastavalt:

			<pre>touch /etc/nginx/sites-enabled/www.mesilane.mm</pre>

			<pre>nan0/etc/nginx/sites-enabled/www.mesilane.mm</pre>

			Näide, mis kasutab sidine www.mesilane.mm:

			<pre>

			listen 443 default_server;

			server_name www.mesilane.mm;


			ssl on;

			ssl_certificate /usr/local/nginx/conf/server.pem;

			ssl_certificate_key /usr/local/nginx/conf/server.key;

			ssl_session_cache shared:SSL:10m;


			location / {


			proxy_pass http://localhost:80; # varnish

			proxy_set_header Host $host;


			# re-write redirects to http as to https, example: /home

			proxy_redirect http:// https://;

			}

			}

			</pre>

2012-12-22T12:02:14Z

Eeldused

← Older revision		Revision as of 15:02, 22 December 2012
Line 10:		Line 10:
	*[[Veebiserveri labor\| Konfigureeritud ja töötav apache 2 veebiserver.]]		*[[Veebiserveri labor\| Konfigureeritud ja töötav apache 2 veebiserver.]]
	*[[varnish\| Konfigureeritud ja töötav varnish.]]		*[[varnish\| Konfigureeritud ja töötav varnish.]]
	*Näites kasutatakse ~~saidine~~ www.mesilane.mm		*Näites kasutatakse saidina www.mesilane.mm

	= Nginx seadistamine =		= Nginx seadistamine =