Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Anyone know about SSL and NGINX under Windows, I have NGINX set up like this:

listen              443;
server_name             wiki.domain.com;

ssl             on;
ssl_certificate         c:\ssl\wild_ssl.crt;
ssl_certificate_key     c:\ssl\wild_ssl.key;
#ssl_protocols          SSLv3 TLSv1;
#ssl_ciphers            HIGH:!aNULL:!MD5;

However, although NGINX loads fine without complaint, I cannot connect to the server by browsing to https://wiki.domain.com, my browser just comes back with a timeout.

I can connect using telnet or OpenSSL which returns this:

c:\SSL>c:\openssl\bin\openssl s_client -connect wiki.domain.com:443
WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Loading 'screen' into random state - done
CONNECTED(00000140)
depth=1 C = US, O = "GeoTrust, Inc.", CN = RapidSSL CA
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/serialNumber=omp0rPkmvQH9Wtg8gZMPgzgw6gFtEurv/C=GB/O=*.domain.com/OU=GT2
6202659/OU=See www.rapidssl.com/resources/cps (c)11/OU=Domain Control Validated
- RapidSSL(R)/CN=*.domain.com
   i:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA
 1 s:/C=US/O=GeoTrust, Inc./CN=RapidSSL CA
   i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA

Anyone any idea what's going on?

share|improve this question
    
I assume you can see the nginx server process listening on port 443 (through netstat) and that the firewall is opened on that port? –  cjc Dec 8 '11 at 15:51
    
Yes, that all works fine, I can telnet from remote to the server etc. –  Lloyd Dec 8 '11 at 15:53
2  
Hmm, next step is to look at the nginx logs, since the service is listening, and SSL is working. –  cjc Dec 8 '11 at 16:35
    
Hmm seems I missed a redirect rewrite and seems to be working now! –  Lloyd Dec 8 '11 at 17:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.