I consider switching from Apache to Nginx (or using it as a reverse
the Apache), but need to upgrade plain HTTP connections to HTTPS using
scheme defined in RFC 2817. Reason for this is a client software running
WiFi Captive Portals, which inserts an “Upgrade: TLS/1.x” request
with custom headers just in front of the encrypted request from a
browser to our login server. In order for this scheme to work, the
connection used for this kind of “ID request” to determine the hotspot
use and the remaining communication must not change over the upgrade,
therefore redirection to the standard HTTPS port of the login server
So, I wonder how I can configure Nginx to get the same effect of
“SSLEngine: optional” setting? I did read the docs about the “starttls”
setting in Nginx, but couldn’t find an example on how exactly to use
a server block to achieve an upgrade to TLS.
Is it possible at all to configure Nginx this way? And if so, can I
custom headers such as “X-HotspotID” if Nginx would be used as a proxy?
Thanx in advance!
Posted at Nginx Forum: