Security/DNSSEC-TLS-nginx

This page details how to set up a virtual machine running a modified version of nginx that uses a self-signed certificate with the DNSSEC TLS extension to authenticate https sessions.

1. Set up a linux VM and enable a host-only network adapter so you can talk to it as well as a NAT'd adapter so it can talk to the internet (outside the scope of this article)
2. In that VM...
3. Get sources:
   1. nginx-1.0.4.tar.gz (not the most recent version - I'll update the patch against it when I get a chance)
   2. openssl-1.0.0d.tar.gz
4. Get patches:
   1. nginx-1.0.4-dnssectls.patch
   2. openssl-1.0.0d-dnssectls.patch