Code and Sorcery

When setting up my development environment I prepare for SSL testing early on. Since I work with different technologies (PHP/RoR) I need a stand-alone SSL proxy solution. In this example I will use nginx (should work with pound or Apache in similar ways).

A valid SSL certificate isn’t needed, so I start by generating a self-signed one.

$ cd /usr/local/nginx/conf
$ mkdir ssl
$ cd ssl
$ openssl genrsa -out server.key 1024
$ openssl req -new -key server.key -out server.csr
$ cp server.key server.key.org
$ openssl rsa -in server.key.org -out server.key
$ openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Now we just need to edit the nginx.conf file.

    server {
        listen       80;
        server_name  *.project.local;

        location / {
          proxy_pass http://127.0.0.1:3000;
          
          proxy_redirect     off;
          proxy_set_header   X-Real-IP        $remote_addr;
          proxy_set_header   Host             $host;
        }
    }

    server {
        listen 443;
        ssl on;
        ssl_certificate     ssl/server.crt;
        ssl_certificate_key ssl/server.key;
    
        location / {
            proxy_pass http://127.0.0.1:80;

            proxy_redirect     off;
            proxy_set_header   Host              $host;
            proxy_set_header   X-Real-IP         $remote_addr;
            proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
            proxy_set_header   X-Forwarded-Proto $scheme;
        }
    }

Pro-Tip: How to get rid of the SSL warning (on OS X)

Modify your openssl.cnf (on OSX you can find it in /System/Library/OpenSSL). Find the line commonName = Common Name (eg, YOUR name), and change it:

0.commonName = CN 1
0.commonName_default = *.project.local

1.commonName = CN 2
1.commonName_default = project.local

# add more if needed

Once you generated the certificate add it to the trusted certificates.

$ sudo /usr/bin/security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain server.crt

Source: wiki.nginx.org

2009-02-19 0 notes

Getting started with Tumblr

Okay, account created, now let’s try out some of the tumblr features. Maybe I’ll just delete my Wordpress blog.

Code and Sorcery

2011-05-13 0 notes

SyntaxHighlighting with Tumblr

0 notes

HTTPS and HTTP Proxy at your service

2009-02-19 0 notes

Getting started with Tumblr