mirror of
https://github.com/certbot/certbot.git
synced 2026-05-28 04:34:11 -04:00
fab9bfd878
* nginx: authenticate all matching vhosts for HTTP01 Previously, the nginx authenticator would set up the HTTP-01 challenge response on a single HTTP vhost which matched the challenge domain. The nginx authenticator will now set the challenge response on every vhost which matches the challenge domain, including duplicates and HTTPS vhosts. This makes the authenticator usable behind a CDN where all origin traffic is performed over HTTPS and also makes the authenticator work more reliably against "invalid" nginx configurations, such as those where there are duplicate vhosts. * some typos * dont authenticate the same vhost twice One vhost may appear in both the HTTP and HTTPS vhost lists. Use a set() to avoid trying to mod the same vhost twice. * fix type annotations * rewrite changelog entry
32 lines
501 B
Text
32 lines
501 B
Text
server {
|
|
server_name ssl.both.com;
|
|
}
|
|
|
|
# a duplicate vhost
|
|
server {
|
|
server_name ssl.both.com;
|
|
}
|
|
|
|
# a duplicate by means of wildcard
|
|
server {
|
|
server_name *.both.com;
|
|
}
|
|
|
|
# combined HTTP and HTTPS
|
|
server {
|
|
server_name ssl.both.com;
|
|
listen 80;
|
|
listen 5001 ssl;
|
|
|
|
ssl_certificate cert.pem;
|
|
ssl_certificate_key cert.key;
|
|
}
|
|
|
|
# HTTPS, duplicate by means of wildcard
|
|
server {
|
|
server_name *.both.com;
|
|
listen 5001 ssl;
|
|
|
|
ssl_certificate cert.pem;
|
|
ssl_certificate_key cert.key;
|
|
}
|