Nginx using HTPPS but without SSL ???

G
  • 27 Jan '23
Hi people, please could you help me?
I need test some pages in my office but with a different domain and I don't
have SSL certificates.

Is there any way to publicate a web site with an alias?
For example   mysite1.com (using nginx) to siteok.domain.com ???

Thanks for your time. Greetings.

-- 
*Gus Flowers*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20230126/f2446238/attachment.htm>
W
  • 28 Jan '23
I'm not sure if it's possible to use TLS without a certificate in nginx, 
but you can use OpenSSL to generate a CA certificate and server 
certificate and deploy it to nginx, as well as trust the CA certificate 
in the client: 
https://mariadb.com/docs/xpand/security/data-in-transit-encryption/create-self 
-signed-certificates-keys-openssl/

How To Configure Nginx as a Reverse Proxy: 
https://www.digitalocean.com/community/tutorials/how-to-configure-nginx-as-a-reverse-proxy-on-ubuntu-22-04

However, as the server program may be bound to a domain, unless your 
test domain is added, reverse proxying may not work or may cause 
problems.

在 2023-01-27 09:26,Gus Flowers Starkiller 写道:

> Hi people, please could you help me?
> I need test some pages in my office but with a different domain and I 
> don't have SSL certificates.
> 
> Is there any way to publicate a web site with an alias?
> For example   mysite1.com [1] (using nginx) to siteok.domain.com [2] 
> ???
> 
> Thanks for your time. Greetings.
> --
> 
> Gus Flowers
> 
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> https://mailman.nginx.org/mailman/listinfo/nginx

Links:
------
[1] http://mysite1.com
[2] http://siteok.domain.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20230128/319be9e4/attachment.htm>
J
  • 28 Jan '23
On Thu, Jan 26, 2023 at 8:26 PM Gus Flowers Starkiller
<relectgustfs at gmail.com> wrote:
>
> I need test some pages in my office but with a different domain and I don't have SSL certificates.
>
> Is there any way to publicate a web site with an alias?
> For example   mysite1.com (using nginx) to siteok.domain.com ???

You can add an alias or cname record in DNS that says mysite1.com ->
siteok.domain.com. However, siteok.domain.com must have a TLS
certificate issued to siteok.domain.com.

One certificate can have multiple domain names by adding the names in
the Subject Alternate Names (SAN). So one certificate can have
mysite1.com and siteok.domain.com.

If you don't want to buy the certificates or go through the validation
process, then you can run your own CA. You install your Root CA
certificate into the browser store. Then you issue web server
certificates to hosts for testing.

Running your own CA is safe and effective. It's no different from what
the public CAs do. I run my own CA at the house.

Jeff