gaja-group
/
server-configs-nginx
mirror of https://github.com/h5bp/server-configs-nginx
2
0
Fork 0
Code Issues Releases Wiki Activity
server-configs-nginx/sites-available/ssl.no-default

14 lines
428 B
Plaintext
Raw Normal View History

Add an ssl no-default example I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
2016-06-08 09:35:40 +02:00
# Drop requests for unknown hosts
#
# If no default server is defined, nginx will use the first found server.
fix missing ;
2016-06-30 14:32:40 +02:00
# To prevent host header attacks, or other potential problems when an unknown
# servername is used in a request, it's recommended to drop the request
Add an ssl no-default example I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
2016-06-08 09:35:40 +02:00
# returning 444 "no response".
server {
Enable IPv6 for no-default
2017-01-01 21:35:59 +01:00
listen [::]:443 ssl default_server;
Add an ssl no-default example I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
2016-06-08 09:35:40 +02:00
listen 443 ssl default_server;
fix missing ;
2016-06-30 14:32:40 +02:00
include h5bp/directive-only/ssl.conf;
Add an ssl no-default example I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
2016-06-08 09:35:40 +02:00
return 444;
}