# Rev. Proxy with SSL: IE/Safari/Chrome ok; FF fails

**URL:** <https://www.ruby-forum.com/t/rev-proxy-with-ssl-ie-safari-chrome-ok-ff-fails/219600>\
**Category:** NGINX\
**Created:** [May 8, 2012, 4:24pm UTC](https://www.ruby-forum.com/t/rev-proxy-with-ssl-ie-safari-chrome-ok-ff-fails/219600 "2012-05-08T16:24:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\
**Post date:** [May 8, 2012, 4:24pm UTC](https://www.ruby-forum.com/t/rev-proxy-with-ssl-ie-safari-chrome-ok-ff-fails/219600/1 "2012-05-08T16:24:14Z")

</div>

Hello,

after playing around for hours I would like to request some help.  
What I want: ssl reverse\_proxy to alfresco/tomcat backend.  
client\<–ssl–\>nginx\<–http–\>backend (1-n)  
I was able to setup it up so it works for IE9/Safari 5.1.5/ Chrome  
18.0.x and older Firefox like 3.6.X  
Login works for Alfresco Share and Alfresco Explorer with these  
browsers.  
With FF 9 or12 only Alf Explorer does, Share Login returns immediately  
to login page.  
I’ve tried numerous configs but can’t get it to work.  
nginx versions 1.2.0 and 1.0.5

nginx.conf:  
user www-data;  
worker\_processes 2;

error\_log /var/log/nginx/debug.log debug;  
pid /var/run/nginx.pid;  
events {  
worker\_connections 1024;  
use epoll;  
accept\_mutex off;  
}

http {  
server\_names\_hash\_bucket\_size 64;  
include /etc/nginx/mime.types;  
default\_type application/octet-stream;  
error\_log /var/log/nginx/error.log;  
access\_log /var/log/nginx/access.log;

sendfile on;  
tcp\_nopush on;  
keepalive\_timeout 65;

# reverse proxy options

proxy\_redirect off;  
proxy\_set\_header Host $host;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for;

# 20111213

client\_body\_buffer\_size 128K;  
client\_max\_body\_size 100M;  
client\_header\_buffer\_size 1M;  
large\_client\_header\_buffers 8 8k;

# Timeouts

client\_body\_timeout 600;  
client\_header\_timeout 60;  
expires 24h;  
send\_timeout 60;

# /20111213

# gzip compression options

gzip on;  
gzip\_http\_version 1.0;  
gzip\_comp\_level 6;  
gzip\_min\_length 0;  
gzip\_buffers 16 8k;  
gzip\_proxied any;  
gzip\_types text/plain text/css text/xml text/javascript  
application/xml application/xml+rss application/javascript  
application/json;  
gzip\_disable “MSIE [1-6].”;  
gzip\_vary on;

include /etc/nginx/sites-enabled/\*.conf;

}

alfresco-8.conf (the only one in sites-enabled):  
server {  
listen 80;  
server\_name alfresco-8.hosts.local;

```
access_log /var/log/nginx/alfresco-8.access.log;
error_log /var/log/nginx/alfresco-8.error.log debug;

return 301 https://alfresco-8.hosts.local$request_uri;

```

}

# Doesn’t matter if these lines are active or not

ssl\_session\_cache shared:SSL:10m;  
ssl\_session\_timeout 10m;

server {  
listen 443;  
server\_name alfresco-8.hosts.local;  
keepalive\_timeout 70;

```
access_log /var/log/nginx/alfresco-8.access.log;
error_log /var/log/nginx/alfresco-8.error.log debug;

ssl on;
ssl_certificate /etc/nginx/keys/staging/ssl-unified.crt;
ssl_certificate_key /etc/nginx/keys/staging/ssl.key;

location / {
   deny all;
}
location /alfresco/ {
   proxy_pass http://192.168.10.48:8080/alfresco/;
}
location /share/ {
   proxy_pass http://192.168.10.48:8080/share/;
}

```

}

BTW: Is it necessary to have port 80 active and a rewirte/return  
directive in the specific section? Doesn’t it work without port 80  
config?  
Wasn’t able to get it to work, because nginx returns always http - URI.

Best Regards  
ulus

Posted at Nginx Forum:

> **[Rev. Proxy with SSL: IE/Safari/Chrome ok; FF fails](https://forum.nginx.org/read.php?2,226177,226177#msg-226177)**
>
> Hello, after playing around for hours I would like to request some help. What I want: ssl reverse\_proxy to alfresco/tomcat backend. client\<--ssl--\>nginx\<--http--\>backend (1-n) I was able to setup it up so it works for IE9/Safari 5.1.5/...