Enabling spdy in nginx fails spdycheck.org

Question

I'm trying to enable spdy with nginx 1.6.0 but spdycheck.org is giving me two complaints:

And

My nginx configuration file is as such:

server {
    listen 80;
    listen 443  ssl spdy;

    server_name 54.201.32.118;

    ssl_certificate /etc/nginx/ssl/tulio.crt;
    ssl_certificate_key /etc/nginx/ssl/tulio.key;

    if ($ssl_protocol = "") {
            rewrite ^  https://$server_name$request_uri? permanent;
    }

    root /usr/share/nginx/html;
    index index.html index.htm;

    location / {
            # First attempt to serve request as file, then
            # as directory, then fall back to displaying a 404.
            try_files $uri $uri/ =404;
            # Uncomment to enable naxsi on this location
            # include /etc/nginx/naxsi.rules
    }
}

The other info of spdycheck you can find at:

http://spdycheck.org/#54.201.32.118

Answer 1

Try a separate server block for http:

server {
    listen 80;
    server_name 54.201.32.118;

    rewrite ^ https://$server_name$request_uri? permanent;
}

And remove listen 80; from first server block.

Also make sure the SSL certificate has 54.201.32.118 as the common name.

Answer 2

They're both quite clear.

Your SSL certificate is not valid, hence the first warning.

You appear to redirect HTTP to HTTPS with a 301 redirect, so you've already done what the second warning suggests.

Answer 3

SPDY is working fine! but

SSL Certificate is not trusted

The certificate is not signed by a trusted authority. If you bought the certificate from a trusted authority, you probably just need to install one or more Intermediate certificates. Contact your certificate provider for assistance doing this for your server platform.

second part is:

server {
    listen 80;
    server_name example.com;
    return 301 https://www.example.com$request_uri;
}

server {   
    listen 443 spdy ssl;
    server_name www.example.com;