Linux Labs

Web stack / Stage 5 of 9

HTTPS in nginx: chain and redirect

Not running Starting usually ~20 s
Leave the lesson

Step 7 of 7 · summary · 2 min

Summary

  • curl checks the chain from the site certificate to the root in the store, and the server sends the client the intermediate certificates.
  • nginx serves everything in the ssl_certificate file: the site certificate first, then the intermediate; the root is not needed.
  • A server block on 80 with return 301 https://$host$request_uri; sends HTTP to HTTPS with the same path and parameters.
  • app.lab.test from the start of the lesson: the root was in the store, but nginx served only the site certificate, and without Lab Issuing CA curl could not get to the root.
Ubuntu 24.04
Loading…