![]() Having looked at the server log for my private team's server I found this: I would consider it a bug that an issue with the client certificate is not told to the user for the reason that the connection failed. I generated a fresh one within Mumble and I could connect to servers. Every connection attempt was immediately dropped with "Server connection failed: The remote host closed the connection.".ĭireFog suggested it may be a certificate issue. Sudo nano /usr/local/etc/nginx/nginx.I was unable to connect to any Mumble server (including my private team one). On Mac following my nginx installation guide open the configuration file which should be in one of these locations, the 2nd is for nginx installation using homebrew sudo nano /usr/local/nginx/conf/nf Open the Linux nginx configuration file, adjust reverse if your file is different sudo nano /etc/nginx/sites-available/reverse server FQDN or YOUR name) : Įmail Address : you can actually configure nginx to use the SSL certificates Configure nginx with SSL Configure nginx to use SSL with Mac and Linux Organizational Unit Name (eg, section) : AdminĬommon Name (e.g. Organization Name (eg, company) : HTPC Guides State or Province Name (full name) : Utopia If you enter '.', the field will be left blank. There are quite a few fields but you can leave some blankįor some fields there will be a default value, What you are about to enter is what is called a Distinguished Name or a DN. On all operating systems you will be prompted for some information, you can leave them all blank if you like You are about to be asked to enter information that will be incorporated Writing new private key to '/nginx-1.6.2/config/nginx.key' You will see this error if you did not run the command prompt as an administrator in Windows or if the folder you are attempting to create the files in does not exist. If on Windows the command is almost identical, only the paths are differentĬreate nginx Windows SSL certificate openssl req -x509 -nodes -days 36500 -newkey rsa:4096 -keyout /nginx-1.6.2/conf/nginx.key -out /nginx-1.6.2/conf/nginx.crt The nodes switch means we don't have to enter the server key's password each time you connect to the nginx web server.Ĭreate the certificate and key on Linux or Mac sudo openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt Now to create the actual SSL certificates, it will last 36500 days and have rsa 2048 bit encryption. On Linux or Mac create an SSL directory sudo mkdir -p /etc/nginx/ssl Open a command prompt for Windows or terminal for Mac and Linux We will be using RSA which is also a respectable encryption method. There is a quick overview of AES encryption types. AES encryption has won awards for its strength, your home router is capable of AES encryption. Other guides use des which is outdated and slow ( Source). On Linux it couldn't be easier, this works on Debian, Ubuntu, Raspbian and should work on any debian based system sudo apt-get install openssl -y Create the SSL Certificate with OpenSSLĪ quick explanation about the best encryption. Now install openssl using Homebrew for Mac brew install openssl OpenSSL on Linux Run homebrew doctor as the installation says brew doctor Run the Terminal and enter this command ruby -e "$(curl -fsSL )" If it says it couldn't be found then you already have command line tools installed You will get a pop up asking to install command line tools. In Terminal, install the command line tools xcode-select -install You can find Terminal in Applications -> Utilities OpenSSL on Mac is done in the Terminal, we need to install x-code utilities and Homebrew in order for OpenSSL to be installed. ![]() If you don't plan on using OpenSSL again then choose for the dll files to be installed to /bin The 32-bit version runs fine on 64-bit machines and is used for this guide. You will need the VC 2008 redistributable for Windows This guide does not help you create SSL certficates from a Certified Authority so you will get warnings that the SSL certificate is not trusted – however, there is no reason not to trust a certificate that you have created yourself! However if you do want an official certificate you can get one for free from StartSSL that you will have to renew each year. ![]() If you haven't you can use this Windows, Mac or Linux guide – though you can also install it on Mac with Homebrew which is much easier, however the paths will be different and you will have to adjust them accordingly in this guide. I will assume you have already installed nginx already. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |