Welcome to Centmin Mod Community
Become a Member

SSL Brotli not enable - when doing keycdn test for Brotli.

Discussion in 'Domains, DNS, Email & SSL Certificates' started by ModeltogTossen, Mar 16, 2016.

  1. ModeltogTossen

    ModeltogTossen I wish I could??

    313
    97
    28
    Dec 20, 2015
    Denmark
    Ratings:
    +143
    Local Time:
    2:30 PM
    1.9.12
    10.0.23
    Hi ..

    Have compiled Brotli as modules and when going to the tools om keycdn site for testing for Broti it says:

    nginx -V gives me this:
    Code:
    nginx version: nginx/1.9.12
    built by gcc 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC)
    built with OpenSSL 1.0.2g  1 Mar 2016
    TLS SNI support enabled
    configure arguments: --with-ld-opt='-ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_stub_status_module --with-http_secure_link_module --with-openssl-opt=enable-tlsext --add-module=../nginx-module-vts --with-libatomic --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_gzip_static_module [B]--add-dynamic-module=../ngx_brotli[/B] --add-dynamic-module=../ngx_pagespeed-release-1.10.33.5-beta --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_realip_module --add-module=../ngx-fancyindex-0.3.6 --add-module=../ngx_cache_purge-2.3 --add-module=../ngx_devel_kit-0.3.0rc1 --add-module=../set-misc-nginx-module-0.30 --add-module=../echo-nginx-module-0.58 --add-module=../redis2-nginx-module-0.12 --add-module=../ngx_http_redis-0.3.7 --add-module=../lua-nginx-module-0.10.1rc1 --add-module=../lua-upstream-nginx-module-0.04 --add-module=../lua-upstream-cache-nginx-module-0.1.1 --add-module=../nginx_upstream_check_module-0.3.0 --add-module=../openresty-memc-nginx-module-4f6f78f --add-module=../srcache-nginx-module-0.30 --add-module=../headers-more-nginx-module-0.29 --with-pcre=../pcre-8.38 --with-pcre-jit --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.0.2g
    ls -al /usr/local/nginx/modules - show this:
    Code:
    -rwxr-xr-x   1 root root   214394 Mar 15 16:43 ngx_http_brotli_filter_module.so
    -rwxr-xr-x   1 root root   110913 Mar 15 16:43 ngx_http_brotli_static_module.so
    -rwxr-xr-x   1 root root   128855 Mar 15 16:43 ngx_http_geoip_module.so
    -rwxr-xr-x   1 root root   149320 Mar 15 16:43 ngx_http_image_filter_module.so
    -rwxr-xr-x   1 root root 17017907 Mar 15 16:43 ngx_pagespeed.so
    -rwxr-xr-x   1 root root   587202 Mar 15 16:43 ngx_stream_module.so
    
    So the question is - what have I overlooked or done wrong? Or is it something with redis cache or perhaps cloudflare?

     
  2. eva2000

    eva2000 Administrator Staff Member

    54,895
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    11:30 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Cloudflare supplies your SSL certificate and serves your HTTPS connections and it doesn't support Brotli that's why. Only Centmin Mod's Nginx server in 123.09beta01 branch by itself with ngx_brotli module enabled will support and brotli compression for keycdn brotli test at Brotli Test | Brotli compression check

    upload_2016-3-16_2-54-8.png
     
    Last edited: Mar 16, 2016
  3. ModeltogTossen

    ModeltogTossen I wish I could??

    313
    97
    28
    Dec 20, 2015
    Denmark
    Ratings:
    +143
    Local Time:
    2:30 PM
    1.9.12
    10.0.23
    What the heck? (May I here say they sucks because of that? :troll:) - and thanks @eva2000 - for clarify this..

    But..

    Maybe its a noob question - when I go to my site and look at the certificate info in browsers - it shows info about my own.. On CF I did chose the SSL Full (Strict). Does that not mean anything or does CF still supplies my SSL certificate?
     
  4. eva2000

    eva2000 Administrator Staff Member

    54,895
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    11:30 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Doesn't matter who's certificate you use. It's which web server serves that SSL certificate. Only a web server that supports brotli compression will report and use brotli compression for HTTPS requests. And that web server is Centmin Mod's Nginx HTTP/2 server when brotli nginx module is enabled in 123.09beta01 branch :) Cloudflare's web servers do not yet support brotli compression.
     
  5. ModeltogTossen

    ModeltogTossen I wish I could??

    313
    97
    28
    Dec 20, 2015
    Denmark
    Ratings:
    +143
    Local Time:
    2:30 PM
    1.9.12
    10.0.23
    Nice - I do understand now - Then its time to move my site away from CF and only be using own webserver/keycdn+cache so I can test brotli.
     
  6. eva2000

    eva2000 Administrator Staff Member

    54,895
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    11:30 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Well you don't need to move away from Cloudflare just for testing. You can bypass CF for a subdomain setup with Centmin Mod's Nginx HTTP/2 SSL and test that.
     
  7. ModeltogTossen

    ModeltogTossen I wish I could??

    313
    97
    28
    Dec 20, 2015
    Denmark
    Ratings:
    +143
    Local Time:
    2:30 PM
    1.9.12
    10.0.23
  8. eva2000

    eva2000 Administrator Staff Member

    54,895
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    11:30 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  9. ModeltogTossen

    ModeltogTossen I wish I could??

    313
    97
    28
    Dec 20, 2015
    Denmark
    Ratings:
    +143
    Local Time:
    2:30 PM
    1.9.12
    10.0.23
    Sorry - you may delete the last 2 post before this and including this..
     
  10. eva2000

    eva2000 Administrator Staff Member

    54,895
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    11:30 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    no worries :)
     
  11. AKIN SENOL

    AKIN SENOL Member

    36
    3
    8
    Oct 17, 2014
    London
    Ratings:
    +8
    Local Time:
    1:30 PM
    1.9.12
    10.1.12
    I'm waiting too, they published this post Results of experimenting with Brotli for dynamic web content a year ago but there is no announcement yet.