- curl checks the chain from the site certificate to the root in the store, and the server sends the client the intermediate certificates.
- nginx serves everything in the
ssl_certificatefile: the site certificate first, then the intermediate; the root is not needed. - A server block on 80 with
return 301 https://$host$request_uri;sends HTTP to HTTPS with the same path and parameters. - app.lab.test from the start of the lesson: the root was in the store, but nginx served only the site certificate, and without Lab Issuing CA curl could not get to the root.
Step 7 of 7 · summary · 2 min
Summary
Found an inaccuracy? Report an error in the lesson