Comments (7)
Hello,
normally plugin automatically generate cbor file from your pem file, or you can use gen-certurl tool
if you use the gen-certurl you should remove "sxg_cert_path" directive
from nginx-sxg-module.
Hello,
normally plugin automatically generate cbor file from your pem file, or you can use gen-certurl tool
if you use the gen-certurl you should remove "sxg_cert_path" directive
Thanks Hasan.
I generated .cbor file for sxg_cert_url
using gen-certurl, but I'm still unable to understand how to generate resource.msg for sxg_validity_url
?
If you have managed to generate one, then can you please let us know?
from nginx-sxg-module.
Hi @twifkak, can you please help us know how the validity information file looks like and how to generate one? In this doc not much is mentioned about it.
It only says that, "sxg_validity_url: URL for the validity information file. It must be https and must be the same origin with the website. This directive is always required."
Can you shed some more light on it and also document it as well for others who are new to signed exchanges?
from nginx-sxg-module.
Hello.
I finally manged to make it work. the sxg_validity_url
its not implemented yet. all you have to do is give the config section a simple url. in my case the file doesn't even exist and it works just fine.
here is my website: ghabzino.com
you can check it out. i had series of problems. after about 2 months I'm not even sure it works or not!!!
from nginx-sxg-module.
@hasan the tricky part is you have to renew cbor file every day!!! i used gen-certurl tool in order to do that. unfortunately i couldn't do it with plugin.
from nginx-sxg-module.
i'm having an issue about cert file after a few days it says certificate is not found on sxg validator extension, you can see #110
do you renew ssl certificate also or just cbor file (gen-certurl --pem /etc/nginx/sxg/domain.pem >> /etc/nginx/sxg/domain.cbor) ?
am i missing something about conf file ? could you share your nginx conf file concerning sxg part
from nginx-sxg-module.
Hello dear @hasan
this message indicates that your cbor file expired and no longer is valid. remember you have to renew your cbor file every day. according to the documents plugin can do it but unfortunately i couldn't use it. here is my config part:
sxg on;
sxg_certificate sxg/ghabzino.pem;
sxg_certificate_key ssl/sxg/ghabzino.key;
sxg_cert_url https://wl.ayanco.com/sxg/ghabzino.cbor;
sxg_validity_url https://ghabzino.com/validity/resource.msg;
sxg_expiry_seconds 604800;
sxg_fallback_host ghabzino.com;
from nginx-sxg-module.
Related Issues (20)
- Nginx -v1.21 building deb file for debian buster. HOT 4
- unknown directive "sxg" in config HOT 3
- Only serve SXG if q-value == 1
- Reliable SEGV while serving CBOR certificate HOT 1
- Add dynamic memory-safety analysis to CI
- Add static memory-safety analysis to CI
- SXG validation failure: Certificate not found even if cert_url is valid
- sxg_cert_path usage problems and improvements
- The homepage of the website in search results page opens wrong url HOT 42
- getting error while compiling module HOT 6
- Error when compiling customer module, it says "cpu_set_t"
- Can we avoid blocking on the refreshing certificate? HOT 1
- Include other response headers in SXG? HOT 5
- Unexpected URLs in signed exchanges when using `try_files` HOT 3
- Configurable SXG lifespan
- `expires` and `cache-control` headers HOT 4
- Support absolute URL requests HOT 1
- Fix github workflows HOT 1
- Error gracefully on too-large subresponses
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nginx-sxg-module.