https://github.com/seb35/nginx-ssl-variables

Configuration to get access to standard (Apache-compatible) SSL variables in nginx
https://github.com/seb35/nginx-ssl-variables

Last synced: 2 months ago
JSON representation

Configuration to get access to standard (Apache-compatible) SSL variables in nginx

• Host: GitHub
• URL: https://github.com/seb35/nginx-ssl-variables
• Owner: Seb35
• License: wtfpl
• Created: 2014-12-02T14:52:29.000Z (about 10 years ago)
• Default Branch: master
• Last Pushed: 2014-12-05T00:27:52.000Z (about 10 years ago)
• Last Synced: 2024-10-04T17:42:23.428Z (3 months ago)
• Language: Shell
• Homepage:
• Size: 227 KB
• Stars: 10
• Watchers: 6
• Forks: 2
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
nginx SSL variables

===================

This creates backward-compatible SSL variables in nginx, compared to Apache mod_ssl module; it is particularly interesting for access to SSL client certificate. A few variables are given by nginx, and some others have to be computed through nginx-Lua with a Lua-OpenSSL interface.

All available SSL variables are given in the [COMPATIBILITY.md](COMPATIBILITY.md) file with its specifications and current implementation status.

Installing

----------

1. Copy the files `*.conf` in your nginx directory `/etc/nginx` (or another non-standard location).

__Soft install:__

2. Include the file `*_ssl_variables.conf` in your web server config corresponding to your gateway (fastcgi, scgi, uwsgi). For instance:

   ```nginx

   location ~ \.php {

       include fastcgi.conf;

       include fastcgi_ssl_variables.conf;

   }

   ```

3. Depending of your nginx version, uncomment lines where a nginx version is indicated. You can also comment some variables you don’t need.

4. Reload nginx. It’s ready!

__Complete install:__

2. Be sure you have installed the [nginx Lua package](http://wiki.nginx.org/HttpLuaModule) (available in the Debian/Ubuntu package nginx-extras).

3. Install the [Lua-OpenSSL interface written by zhaozg](https://github.com/zhaozg/lua-openssl) and be sure it works in the Lua command line.

4. Include the file `*_ssl_variables_lua.conf` in your web server config corresponding to your gateway (fastcgi, scgi, uwsgi). For instance:

   ```nginx

   location ~ \.php {

       include fastcgi.conf;

       include fastcgi_ssl_variables_lua.conf;

   }

   ```

5. Depending of your nginx version, uncomment lines where a nginx version is indicated. You can also comment some variables you don’t need.

6. Reload nginx. It’s ready!

Contributing

------------

Don’t hesit to submit pull requests or open [issues](https://github.com/Seb35/nginx-ssl-variables/issues). When you change files, you only need to change the two files `fastcgi_*.conf`, then use the Bash script `utils/sync_scgi-uwsgi_from_fastcgi.sh` to update the four other files, `scgi_*.conf` and `uwsgi_*.conf`.

I’m not (yet) part of nginx community, and I don’t know if such a patch could/should be added to nginx, neither know the SSL module development policy and roadmap; if you have some advices about that, you can reach me to discuss.

Licence

-------

* Original author: [Seb35](https://github.com/Seb35)

* Licence: [WTFPL 2](http://www.wtfpl.net)