Add an ssl no-default example
I.e. an example of this: -> curl -kI -H "Host: valid.com" https://localhost HTTP/1.1 200 OK ... -> curl -kI -H "Host: invalid.com" https://localhost curl: (52) Empty reply from server Whether this works or not depends on SNI.
This commit is contained in:
parent
6be3c46535
commit
7a0e282dd0
|
@ -0,0 +1,12 @@
|
|||
# Drop requests for unknown hosts
|
||||
#
|
||||
# If no default server is defined, nginx will use the first found server.
|
||||
# To prevent host header attacks, or other potential problems when an unknown
|
||||
# servername is used in a request, it's recommended to drop the request
|
||||
# returning 444 "no response".
|
||||
|
||||
server {
|
||||
listen 443 ssl default_server;
|
||||
include h5bp/direcitve-only/ssl.conf
|
||||
return 444;
|
||||
}
|
Loading…
Reference in New Issue