1
0
mirror of https://github.com/nginx-proxy/nginx-proxy synced 2025-07-23 21:28:09 +02:00
nginx-proxy/test/test_multiple-ports
Richard Hansen dfd4f54c61 fix: Don't downgrade from https to http if certificate is missing
Before, if a site's certificate was not found, the site was served
over http rather than https.  Failing open like this is problematic
for sites where security is important.  Presumably the user set
`HTTPS_METHOD` to a non-`noredirect` value (or left it unset) for a
good reason; we should honor it even if it means serving error
messages.

WARNING: This change breaks compatibility.  Any vhost where all of the
following are true will fail after this change:

  * `HTTPS_METHOD` is either unset or set to a value other than
    `nohttps`.
  * The vhost does not have its own certificate (`default.crt` doesn't
    count).
  * Clients expect to be able to access the vhost by using plain http
    to nginx-proxy.

To get the previous behavior, set `HTTPS_METHOD` to `nohttps` for the
vhost.
2023-05-14 14:56:43 -04:00
..
test_default-80.py TESTS: replace old test suite with the new one 2017-02-17 00:29:30 +01:00
test_default-80.yml fix: Don't downgrade from https to http if certificate is missing 2023-05-14 14:56:43 -04:00
test_single-port-not-80.py TESTS: replace old test suite with the new one 2017-02-17 00:29:30 +01:00
test_single-port-not-80.yml fix: Don't downgrade from https to http if certificate is missing 2023-05-14 14:56:43 -04:00
test_VIRTUAL_PORT-single-different-from-single-port.py test: VIRTUAL_PORT != single exposed port 2021-05-28 00:04:59 +02:00
test_VIRTUAL_PORT-single-different-from-single-port.yml fix: Don't downgrade from https to http if certificate is missing 2023-05-14 14:56:43 -04:00
test_VIRTUAL_PORT.py TESTS: replace old test suite with the new one 2017-02-17 00:29:30 +01:00
test_VIRTUAL_PORT.yml fix: Don't downgrade from https to http if certificate is missing 2023-05-14 14:56:43 -04:00