>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #1346794. --> Reported by: [mrfelton](https://www.drupal.org/user/305669) >>> <p>If you have a redirect set up in Aegir (say to redirect example.com to <a href="http://www.example.com">www.example.com</a>), and you are using nginx_ssl, browsers will not accept the SSL certificates reporting ssl_error_rx_record_too_long.</p> <p>I managed to resolve this by adding the SSL declarations to the redirect vhost. For example, this is what Aegir will produce:</p> <pre>server {<br>&nbsp;&nbsp; listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 69.164.198.11:443;<br>&nbsp;&nbsp; server_name example.com;<br>&nbsp;&nbsp; rewrite ^ $scheme://www.example.com$request_uri? permanent;<br>}<br><br>server {<br>&nbsp;&nbsp; include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/includes/fastcgi_ssl_params.conf;<br>&nbsp;&nbsp; limit_conn&nbsp;&nbsp; gulag 10; # like mod_evasive - this allows max 10 simultaneous connections from one IP address<br>&nbsp;&nbsp; listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 69.164.198.11:443;<br>&nbsp;&nbsp; server_name&nbsp; www.example.com;<br>&nbsp;&nbsp; root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/platforms/live/sac-7.9-16112011;<br>&nbsp;&nbsp; ssl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; on;<br>&nbsp;&nbsp; ssl_certificate&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;<br>&nbsp;&nbsp; ssl_certificate_key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;<br>&nbsp;&nbsp; ssl_protocols&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SSLv3 TLSv1;<br>&nbsp;&nbsp; ssl_ciphers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HIGH:!ADH:!MD5;<br>&nbsp;&nbsp; ssl_prefer_server_ciphers&nbsp;&nbsp; on;<br>&nbsp;&nbsp; keepalive_timeout&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 70;<br>&nbsp;&nbsp; include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/includes/nginx_simple_include.conf;<br>}</pre><p>Which doesn't work. This is what you need to do to get it to work (ie. Also add the ssl declarations to the redirect vhost)</p> <pre>server {<br>&nbsp;&nbsp; listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 69.164.198.11:443;<br>&nbsp;&nbsp; server_name example.com;<br>&nbsp;&nbsp; rewrite ^ $scheme://www.example.com$request_uri? permanent;<br><br>&nbsp;&nbsp; ssl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; on;<br>&nbsp;&nbsp; ssl_certificate&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;<br>&nbsp;&nbsp; ssl_certificate_key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;<br>&nbsp;&nbsp; ssl_protocols&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SSLv3 TLSv1;<br>&nbsp;&nbsp; ssl_ciphers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HIGH:!ADH:!MD5;<br>&nbsp;&nbsp; ssl_prefer_server_ciphers&nbsp;&nbsp; on;<br>}<br><br>server {<br>&nbsp;&nbsp; include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/includes/fastcgi_ssl_params.conf;<br>&nbsp;&nbsp; limit_conn&nbsp;&nbsp; gulag 10; # like mod_evasive - this allows max 10 simultaneous connections from one IP address<br>&nbsp;&nbsp; listen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 69.164.198.11:443;<br>&nbsp;&nbsp; server_name&nbsp; www.example.com;<br>&nbsp;&nbsp; root&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/platforms/live/sac-7.9-16112011;<br>&nbsp;&nbsp; ssl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; on;<br>&nbsp;&nbsp; ssl_certificate&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.crt;<br>&nbsp;&nbsp; ssl_certificate_key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/server_example/ssl.d/www.example.com/openssl.key;<br>&nbsp;&nbsp; ssl_protocols&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SSLv3 TLSv1;<br>&nbsp;&nbsp; ssl_ciphers&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HIGH:!ADH:!MD5;<br>&nbsp;&nbsp; ssl_prefer_server_ciphers&nbsp;&nbsp; on;<br>&nbsp;&nbsp; keepalive_timeout&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 70;<br>&nbsp;&nbsp; include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/aegir/config/includes/nginx_simple_include.conf;<br>}</pre>