[openresty/1.5.12.1] SSL support issue

sumanadak · 2014-05-23T02:37:26+00:00

Hello! On Fri, May 23, 2014 at 1:28 AM, Gordon Madarm wrote: > > Hi Agentzh, > Please do not capitalize my nick. Thank you. > Thanks for your...

[openresty/1.5.12.1] SSL support issue

sumanadak

Dear all,

I am trying to do ssl support. I generated all the certificate as said (http://wiki.nginx.org/HttpSslModule#Generate_Certificates)

I made a change in my conf as bellow

server {

listen 8080;

listen 443;

ssl on;

ssl_certificate /usr/local/openresty/nginx/ssl/server.crt;

ssl_certificate_key /usr/local/openresty/nginx/ssl/server.key;

keepalive_timeout 70;

........

}

While I ran with non sudo user with ubuntu, I got permission denied. Understand that port below 1024 needs root permission. I changed to 8443 but I was getting this error. Also trying with 8080 port gives me error. Can someone please help me??

Error log:

2014/05/22 23:49:44 [notice] 6095#0: openresty/1.5.12.1

2014/05/22 23:49:44 [notice] 6095#0: built by gcc 4.8.2 (Ubuntu 4.8.2-19ubuntu1)

2014/05/22 23:49:44 [notice] 6095#0: OS: Linux 3.13.0-24-generic

2014/05/22 23:49:44 [notice] 6095#0: getrlimit(RLIMIT_NOFILE): 1024:4096

2014/05/22 23:49:44 [notice] 6096#0: start worker processes

2014/05/22 23:49:44 [notice] 6096#0: start worker process 6097

2014/05/22 23:50:12 [info] 6097#0: *1 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: , request: "GET /api/sos/v1.0/capabilities HTTP/1.1", host: "localhost:8080"

2014/05/22 23:52:01 [info] 6097#0: *2 client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8443

thanks

Suman

hamish.forbes

You're listening for SSL connections on both ports.

Remove 'ssl on;'

Change 'listen 443;' to 'listen 443 ssl;

Should fix it.

On Thursday, 22 May 2014 19:37:25 UTC+1, Suman Adak wrote:

Dear all,

I am trying to do ssl support. I generated all the certificate as said (http://wiki.nginx.org/HttpSslModule#Generate_Certificates)

I made a change in my conf as bellow
server {
listen 8080;
listen 443;
ssl on;
ssl_certificate /usr/local/openresty/nginx/ssl/server.crt;
ssl_certificate_key /usr/local/openresty/nginx/ssl/server.key;
keepalive_timeout 70;
........
}

While I ran with non sudo user with ubuntu, I got permission denied. Understand that port below 1024 needs root permission. I changed to 8443 but I was getting this error. Also trying with 8080 port gives me error. Can someone please help me??

Error log:

2014/05/22 23:49:44 [notice] 6095#0: openresty/1.5.12.1
2014/05/22 23:49:44 [notice] 6095#0: built by gcc 4.8.2 (Ubuntu 4.8.2-19ubuntu1)
2014/05/22 23:49:44 [notice] 6095#0: OS: Linux 3.13.0-24-generic
2014/05/22 23:49:44 [notice] 6095#0: getrlimit(RLIMIT_NOFILE): 1024:4096
2014/05/22 23:49:44 [notice] 6096#0: start worker processes
2014/05/22 23:49:44 [notice] 6096#0: start worker process 6097
2014/05/22 23:50:12 [info] 6097#0: *1 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: , request: "GET /api/sos/v1.0/capabilities HTTP/1.1", host: "localhost:8080"
2014/05/22 23:52:01 [info] 6097#0: *2 client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8443

thanks
Suman

sumanadak

Thanks Hamish,

I am able to connect with non ssl port - 8080 but Still I am getting error for 443 while running nginx. I put this command

"sudo utf allow 443" before run openresty. I could understand, this is purely linux problem, still not able to figure out. running openresty with sudo also gives error. wanted to open 443 for non sudo user. but not able to figure out.

nginx: [emerg] bind() to 0.0.0.0:443 failed (13: Permission denied)

Thanks

suman

On Fri, May 23, 2014 at 12:15 AM, Hamish Forbes <hamish...@gmail.com> wrote:

You're listening for SSL connections on both ports.

Remove 'ssl on;'
Change 'listen 443;' to 'listen 443 ssl;

Should fix it.

On Thursday, 22 May 2014 19:37:25 UTC+1, Suman Adak wrote:
Dear all,

I am trying to do ssl support. I generated all the certificate as said (http://wiki.nginx.org/HttpSslModule#Generate_Certificates)

I made a change in my conf as bellow
server {
listen 8080;
listen 443;
ssl on;
ssl_certificate /usr/local/openresty/nginx/ssl/server.crt;

ssl_certificate_key /usr/local/openresty/nginx/ssl/server.key;
keepalive_timeout 70;

........
}

While I ran with non sudo user with ubuntu, I got permission denied. Understand that port below 1024 needs root permission. I changed to 8443 but I was getting this error. Also trying with 8080 port gives me error. Can someone please help me??

Error log:

2014/05/22 23:49:44 [notice] 6095#0: openresty/1.5.12.1
2014/05/22 23:49:44 [notice] 6095#0: built by gcc 4.8.2 (Ubuntu 4.8.2-19ubuntu1)

2014/05/22 23:49:44 [notice] 6095#0: OS: Linux 3.13.0-24-generic
2014/05/22 23:49:44 [notice] 6095#0: getrlimit(RLIMIT_NOFILE): 1024:4096
2014/05/22 23:49:44 [notice] 6096#0: start worker processes

2014/05/22 23:49:44 [notice] 6096#0: start worker process 6097
2014/05/22 23:50:12 [info] 6097#0: *1 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: , request: "GET /api/sos/v1.0/capabilities HTTP/1.1", host: "localhost:8080"

2014/05/22 23:52:01 [info] 6097#0: *2 client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8443

thanks

Suman

.

--
Thanks and Regards
Suman Adak

hamish.forbes

You need to be running openresty as root if you want to bind to privileged ports (e.g. 80 and 443).

What error do you get when using sudo?

Also how are you making a https request to openresty?

Sounds like you're making an HTTP request to port expecting an HTTPS request.

On Thursday, 22 May 2014 20:47:25 UTC+1, Suman Adak wrote:

Thanks Hamish,

I am able to connect with non ssl port - 8080 but Still I am getting error for 443 while running nginx. I put this command
"sudo utf allow 443" before run openresty. I could understand, this is purely linux problem, still not able to figure out. running openresty with sudo also gives error. wanted to open 443 for non sudo user. but not able to figure out.

nginx: [emerg] bind() to 0.0.0.0:443 failed (13: Permission denied)

Thanks
suman

On Fri, May 23, 2014 at 12:15 AM, Hamish Forbes <hamish...@gmail.com> wrote:

You're listening for SSL connections on both ports.

Remove 'ssl on;'
Change 'listen 443;' to 'listen 443 ssl;

Should fix it.

On Thursday, 22 May 2014 19:37:25 UTC+1, Suman Adak wrote:
Dear all,

I am trying to do ssl support. I generated all the certificate as said (http://wiki.nginx.org/HttpSslModule#Generate_Certificates)

I made a change in my conf as bellow
server {
listen 8080;
listen 443;
ssl on;
ssl_certificate /usr/local/openresty/nginx/ssl/server.crt;

ssl_certificate_key /usr/local/openresty/nginx/ssl/server.key;
keepalive_timeout 70;

........
}

While I ran with non sudo user with ubuntu, I got permission denied. Understand that port below 1024 needs root permission. I changed to 8443 but I was getting this error. Also trying with 8080 port gives me error. Can someone please help me??

Error log:

2014/05/22 23:49:44 [notice] 6095#0: openresty/1.5.12.1
2014/05/22 23:49:44 [notice] 6095#0: built by gcc 4.8.2 (Ubuntu 4.8.2-19ubuntu1)

2014/05/22 23:49:44 [notice] 6095#0: OS: Linux 3.13.0-24-generic
2014/05/22 23:49:44 [notice] 6095#0: getrlimit(RLIMIT_NOFILE): 1024:4096
2014/05/22 23:49:44 [notice] 6096#0: start worker processes

2014/05/22 23:49:44 [notice] 6096#0: start worker process 6097
2014/05/22 23:50:12 [info] 6097#0: *1 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: , request: "GET /api/sos/v1.0/capabilities HTTP/1.1", host: "localhost:8080"

2014/05/22 23:52:01 [info] 6097#0: *2 client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8443

thanks

Suman

.

--
Thanks and Regards
Suman Adak

sumanadak

hello,

If I run with sudo I get this error

suman@suman-ripsac:~/project_work/ngnixwork$ sudo nginx -p `pwd`/ -c conf/nginx.conf

nginx: [emerg] unknown directive "content_by_lua" in /home/suman/project_work/ngnixwork/conf/nginx.conf:13

suman@suman-ripsac:~/project_work/ngnixwork$ which nginx
/usr/local/openresty/nginx/sbin/nginx
suman@suman-ripsac:~/project_work/ngnixwork$ nginx -v
nginx version: openresty/1.5.12.1
suman@suman-ripsac:~/project_work/ngnixwork$

I am using rest chrome extension and I called like

https://localhost:443/test

On Fri, May 23, 2014 at 1:25 AM, Hamish Forbes <hamish...@gmail.com> wrote:

You need to be running openresty as root if you want to bind to privileged ports (e.g. 80 and 443).
What error do you get when using sudo?
Also how are you making a https request to openresty?

Sounds like you're making an HTTP request to port expecting an HTTPS request.

On Thursday, 22 May 2014 20:47:25 UTC+1, Suman Adak wrote:
Thanks Hamish,

I am able to connect with non ssl port - 8080 but Still I am getting error for 443 while running nginx. I put this command
"sudo utf allow 443" before run openresty. I could understand, this is purely linux problem, still not able to figure out. running openresty with sudo also gives error. wanted to open 443 for non sudo user. but not able to figure out.

nginx: [emerg] bind() to 0.0.0.0:443 failed (13: Permission denied)

Thanks
suman

On Fri, May 23, 2014 at 12:15 AM, Hamish Forbes <hamish...@gmail.com> wrote:

You're listening for SSL connections on both ports.

Remove 'ssl on;'
Change 'listen 443;' to 'listen 443 ssl;

Should fix it.

On Thursday, 22 May 2014 19:37:25 UTC+1, Suman Adak wrote:
Dear all,

I am trying to do ssl support. I generated all the certificate as said (http://wiki.nginx.org/HttpSslModule#Generate_Certificates)

I made a change in my conf as bellow
server {
listen 8080;
listen 443;
ssl on;
ssl_certificate /usr/local/openresty/nginx/ssl/server.crt;

ssl_certificate_key /usr/local/openresty/nginx/ssl/server.key;
keepalive_timeout 70;

........
}

While I ran with non sudo user with ubuntu, I got permission denied. Understand that port below 1024 needs root permission. I changed to 8443 but I was getting this error. Also trying with 8080 port gives me error. Can someone please help me??

Error log:

2014/05/22 23:49:44 [notice] 6095#0: openresty/1.5.12.1
2014/05/22 23:49:44 [notice] 6095#0: built by gcc 4.8.2 (Ubuntu 4.8.2-19ubuntu1)

2014/05/22 23:49:44 [notice] 6095#0: OS: Linux 3.13.0-24-generic
2014/05/22 23:49:44 [notice] 6095#0: getrlimit(RLIMIT_NOFILE): 1024:4096
2014/05/22 23:49:44 [notice] 6096#0: start worker processes

2014/05/22 23:49:44 [notice] 6096#0: start worker process 6097
2014/05/22 23:50:12 [info] 6097#0: *1 client sent plain HTTP request to HTTPS port while reading client request headers, client: 127.0.0.1, server: , request: "GET /api/sos/v1.0/capabilities HTTP/1.1", host: "localhost:8080"

2014/05/22 23:52:01 [info] 6097#0: *2 client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:8443

thanks

Suman

.

--
Thanks and Regards
Suman Adak
agentzh
Hello!

On Thu, May 22, 2014 at 1:16 PM, Suman Adak wrote:
> suman@suman-ripsac:~/project_work/ngnixwork$ sudo nginx -p `pwd`/ -c
> conf/nginx.conf
>
> nginx: [emerg] unknown directive "content_by_lua" in
> /home/suman/project_work/ngnixwork/conf/nginx.conf:13

You're using another nginx that is not provided by openresty.

> suman@suman-ripsac:~/project_work/ngnixwork$ which nginx
> /usr/local/openresty/nginx/sbin/nginx

The PATH environment of your current system account is not the same as
the one when you run "sudo" (as root).

Try the command to check which nginx you're actually using:

    sudo which nginx

Seems like you need to learn more Linux basics first ;)

Regards,
-agentzh
sumanadak

Dear agentzh,

I am learning. :-). I managed by adding "alias sudo='sudo env PATH=$PATH'" in .basrc.

Thanks

On Fri, May 23, 2014 at 1:55 AM, Yichun Zhang (agentzh) <age...@gmail.com> wrote:
Hello!

On Thu, May 22, 2014 at 1:16 PM, Suman Adak wrote:
> suman@suman-ripsac:~/project_work/ngnixwork$ sudo nginx -p `pwd`/ -c
> conf/nginx.conf
>
> nginx: [emerg] unknown directive "content_by_lua" in
> /home/suman/project_work/ngnixwork/conf/nginx.conf:13

You're using another nginx that is not provided by openresty.

> suman@suman-ripsac:~/project_work/ngnixwork$ which nginx
> /usr/local/openresty/nginx/sbin/nginx

The PATH environment of your current system account is not the same as
the one when you run "sudo" (as root).

Try the command to check which nginx you're actually using:

sudo which nginx

Seems like you need to learn more Linux basics first ;)

Regards,
-agentzh

.

--
Thanks and Regards
Suman Adak

sumanadak

Dear,

But still I am getting error while accessing with https://localhost:443/test. with http://localhost:8080/test/ works fine for me.

I ran openresty using sudo mode.

Error is
"client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:443"

Sorry for my little linux knowledge.

Thanks
Suman

On Fri, May 23, 2014 at 8:50 AM, Suman Adak <suma...@gmail.com> wrote:

Dear agentzh,

I am learning. :-). I managed by adding "alias sudo='sudo env PATH=$PATH'" in .basrc.

Thanks

On Fri, May 23, 2014 at 1:55 AM, Yichun Zhang (agentzh) <age...@gmail.com> wrote:
Hello!

On Thu, May 22, 2014 at 1:16 PM, Suman Adak wrote:
> suman@suman-ripsac:~/project_work/ngnixwork$ sudo nginx -p `pwd`/ -c
> conf/nginx.conf
>
> nginx: [emerg] unknown directive "content_by_lua" in
> /home/suman/project_work/ngnixwork/conf/nginx.conf:13

You're using another nginx that is not provided by openresty.

> suman@suman-ripsac:~/project_work/ngnixwork$ which nginx
> /usr/local/openresty/nginx/sbin/nginx

The PATH environment of your current system account is not the same as
the one when you run "sudo" (as root).

Try the command to check which nginx you're actually using:

sudo which nginx

Seems like you need to learn more Linux basics first ;)

Regards,
-agentzh

.

--
Thanks and Regards
Suman Adak

--
Thanks and Regards
Suman Adak

sumanadak

Dear All,

Thanks a lot.

I solved it. It was sudo privilege and certificate issue. Thanks a lot for support.

On Fri, May 23, 2014 at 8:57 AM, Suman Adak <suma...@gmail.com> wrote:

Dear,

But still I am getting error while accessing with https://localhost:443/test. with http://localhost:8080/test/ works fine for me.

I ran openresty using sudo mode.

Error is
"client closed connection while waiting for request, client: 127.0.0.1, server: 0.0.0.0:443"

Sorry for my little linux knowledge.

Thanks
Suman

On Fri, May 23, 2014 at 8:50 AM, Suman Adak <suma...@gmail.com> wrote:

Dear agentzh,

I am learning. :-). I managed by adding "alias sudo='sudo env PATH=$PATH'" in .basrc.

Thanks

On Fri, May 23, 2014 at 1:55 AM, Yichun Zhang (agentzh) <age...@gmail.com> wrote:
Hello!

On Thu, May 22, 2014 at 1:16 PM, Suman Adak wrote:
> suman@suman-ripsac:~/project_work/ngnixwork$ sudo nginx -p `pwd`/ -c
> conf/nginx.conf
>
> nginx: [emerg] unknown directive "content_by_lua" in
> /home/suman/project_work/ngnixwork/conf/nginx.conf:13

You're using another nginx that is not provided by openresty.

> suman@suman-ripsac:~/project_work/ngnixwork$ which nginx
> /usr/local/openresty/nginx/sbin/nginx

The PATH environment of your current system account is not the same as
the one when you run "sudo" (as root).

Try the command to check which nginx you're actually using:

sudo which nginx

Seems like you need to learn more Linux basics first ;)

Regards,
-agentzh

.

--
Thanks and Regards
Suman Adak

--
Thanks and Regards
Suman Adak