Comment on ESXi Embedded Host Client by Etienne Le Sueur

So I have the following working:

upstream esx {
server :443;
}

server {
listen 443;
server_name localhost;

ssl on;
ssl_certificate /Users/elesueur/ssl/nginx/esx/rui.crt;
ssl_certificate_key /Users/elesueur/ssl/nginx/esx/rui.key;
ssl_session_cache builtin:1000 shared:SSL:10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
ssl_prefer_server_ciphers on;

location / {
proxy_pass https://esx;
proxy_redirect off;
}
}

The keys are the same as the ones installed on ESXi which you can find in /etc/vmware/ssl on the host. I’m not sure if it is a requirement that they be the same.

However, I guess you’re trying to have the proxy listen on a non / endpoint. I don’t quite have that working yet.