ngx_upstream_jdomain module reviews

2021-01-14 Thread nicholaschiasson
Hello, I'd like to make a request for reviews of the code for this module I maintain https://github.com/nicholaschiasson/ngx_upstream_jdomain. The module's purpose is to provide a directive to be used in the upstream context to define upstream servers from a domain name, and have the servers upda

Strange ssl_client_certificate limitation?

2021-01-14 Thread Rene Moser
Hi I have a hard time with ssl_client_certificate. I try to use vhosts with 2 separated CA in ssl_client_certificate configs but I was not able to do it as expected. The later ssl_client_certificate was not taken in effect and even more unexpected I was able to use the first client cert to au

Re: Strange ssl_client_certificate limitation?

2021-01-14 Thread Francis Daly
On Thu, Jan 14, 2021 at 09:29:25PM +0100, Rene Moser wrote: Hi there, > To show the limitation, I created a reproducer: > > https://github.com/resmo/nginx-ssl_client_certificate-limit > > Please tell me I did something terribly wrong. You seem to be trying to test the different server names us

Re: Strange ssl_client_certificate limitation?

2021-01-14 Thread Rene Moser
The only way I was able to accept both certs but use the one or the other in the vhost was to bundle the certs and distinguish by issuer dn, see: https://github.com/resmo/nginx-ssl_client_certificate-limit/pull/1 This works as expected, but feels kind of a hack. Any other suggestions? On 14.

Re: how would i host more than 2 sites on the same port and IP address?

2021-01-14 Thread Francis Daly
On Wed, Jan 13, 2021 at 05:31:55PM -0500, rveerman wrote: Hi there, > possible to host more than 2 sites on the same IP and port, distinguishing > between the sites only by means of the actual server name as it's entered > into the browser.. You run a single instance of nginx with multiple serve

Re: how would i host more than 2 sites on the same port and IP address?

2021-01-14 Thread rveerman
cool :) i was able to get it to work. for completeness sake, and for all those looking for an explanation as to how to get this done properly, i will post my setup to this list now. sorry if this seems clueless to the members of this list, but please realize that there are plenty of people out th