всем привет nginx(прокси) + iis
upstream IIS-SSL {
# least_conn;
ip_hash;
server 10.20.13.48:443;
}
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers EECDH:+AES256:-3DES:RSA+AES:RSA+3DES:!NULL:!RC4;
ssl_certificate /etc/nginx/ssl/test.crt;
ssl_certificate_key /etc/nginx/ssl/test.key;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
location ~* ^/ {
proxy_pass https://IIS-SSL;
proxy_set_header Host proxy.test.ru;
proxy_set_header X-Real-Ip $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE_ADDR $remote_addr;
proxy_connect_timeout 180;
proxy_send_timeout 180;
proxy_read_timeout 180;
proxy_cache cache;
proxy_cache_valid 200 302 1h;
}
ошибка вида:
[error] 22134#0: *1 peer closed connection in SSL handshake (104: Connection reset by peer) while SSL handshaking to upstream, client: 10.20.3.37, server: proxy.test.ru, request: "GET /favicon.ico HTTP/1.1", upstream:
что я делаю не так?