# SSL issue

**URL:** <https://www.ruby-forum.com/t/ssl-issue/120390>\
**Category:** NGINX\
**Created:** [November 16, 2007, 2:02pm UTC](https://www.ruby-forum.com/t/ssl-issue/120390 "2007-11-16T14:02:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![adityanalla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/8baadc/32.png) [@adityanalla](https://www.ruby-forum.com/u/adityanalla)\
**Post date:** [November 16, 2007, 2:02pm UTC](https://www.ruby-forum.com/t/ssl-issue/120390/1 "2007-11-16T14:02:31Z")

</div>

I am setting up a server with nginx, mongrel cluster with ssl. I am not  
able to get the ssl settings right. I have used that standard settings  
mentioned in most of the blogs…

listen 443;  
ssl on;  
ssl\_certificate /usr/local/nginx/conf/cert.pem;  
ssl\_certificate\_key /usr/local/nginx/conf/cert.key;  
keepalive\_timeout 70;

IS there something which I am missing?

---

<div class="post-metadata">

**Author:** ![adityanalla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/8baadc/32.png) [@adityanalla](https://www.ruby-forum.com/u/adityanalla)\
**Post date:** [November 16, 2007, 4:38pm UTC](https://www.ruby-forum.com/t/ssl-issue/120390/2 "2007-11-16T16:38:02Z")

</div>

On Nov 16, 2007 8:02 AM, Aditya N. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> IS there something which I am missing?  
> Not with what you have above.

What does the error message say? Generally it is very easy to have  
issues with cert.pem as it is extremely touchy.

~Wayne

---

<div class="post-metadata">

**Author:** ![adityanalla](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/8baadc/32.png) [@adityanalla](https://www.ruby-forum.com/u/adityanalla)\
**Post date:** [November 16, 2007, 7:02pm UTC](https://www.ruby-forum.com/t/ssl-issue/120390/3 "2007-11-16T19:02:52Z")

</div>

i had the same problems until i  
added in the protocols and ciphers

listen 443;  
server\_name localhost;  
ssl on;  
ssl\_session\_timeout 5m;  
ssl\_protocols SSLv2 SSLv3 TLSv1;  
ssl\_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;  
ssl\_prefer\_server\_ciphers on;  
client\_max\_body\_size 50M;  
ssl\_certificate /usr/local/nginx/conf/certs/sa\_greenling\_com.crt;  
ssl\_certificate\_key /usr/local/nginx/conf/certs/server.key;

“Wayne E. Seguin” [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: On Nov 16, 2007 8:02  
AM, Aditya N.  
wrote:

> IS there something which I am missing?  
> Not with what you have above.

What does the error message say? Generally it is very easy to have  
issues with cert.pem as it is extremely touchy.

~Wayne