user  cpnginx;

worker_processes  auto;

error_log  stderr info;

events {
    worker_connections 1024;
}

http {
    server {
        listen 443 sspi; #включаем SSPI
        proxy_ssl_session_reuse off;
        sspi_certificate 0x1318FF952931EBC7;
        sspi_certificate 0x79ED3E0805BD235E83821556BF7EBD9F647F9246;
        # sspi_certificate 0x27C10A8D17FAFF094F866E3A4C584494BE2E3F25;
        sspi_protocols TLSv1.2;
        # sspi_verify_client on;
        # sspi_client_certificate TrustedCerts;
        # ssl_certificate /etc/nginx/rsa_cert.crt;
        # ssl_certificate_key /etc/nginx/rsa_cert.key;

        location / {
            proxy_sspi on;
            # proxy_pass http://localhost:80;
            # return 200 'Its Works!';
            # add_header Content-Type text/plain;
            root /var/opt/cprocsp/cpnginx/html/;
            # proxy_sspi on;
            # proxy_ssl_verify on;
            # proxy_ssl_certificate /etc/opt/cprocsp/cpnginx/ca.crt;
            # proxy_ssl_server_name on;
            # proxy_ssl_trusted_certificate Root;
        }

        location /info {
            return 200 'Its Works!';
            add_header Content-Type text/plain;
        }
        server_name _;
    }
}