listen 443 ssl precedence

[https://stackoverflow.com/users/12360980/logi]

Hi,
I belive this is a bug.

Using listen ... ssl in a single vhost server block forces every other vhost (even defined in a different file!) with same port listening to apply ssl-related directives, i.e.:

nginx[343400]: nginx: [emerg] no "ssl_certificate" is defined for the "listen ... ssl" directive in /etc/nginx/sites-enabled/aaa-default.conf:1

/etc/nginx/sites-enabled #: cat aaa-default.conf 
server {

    listen 80;
    listen 443;
    server_name _;
}

and the other file, that using ssl:

server {
    # Update this line to be your domain
    listen 80;
    server_name xxx.domain.tld;
}

server {
    listen 443 ssl;
    server_name xxx.domain.tld;

    ssl_dhparam /etc/nginx/ssl/dhparams.pem;

    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;

    proxy_buffering off;

    location / {
        proxy_pass ht_t_ps:_/_/xxx.xxx.xxx.xxx; #Maximum number of external links per post exceeded
        proxy_set_header Host $host;
        proxy_redirect ht_tp:// htt_ps://;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}

/etc/nginx/sites-enabled #: cat ../inc/ssl.conf 
#ssl on;

ssl_certificate /root/.acme.sh/logiczny.it/fullchain.cer;
ssl_certificate_key /root/.acme.sh/logiczny.it/logiczny.it.key;

ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers         HIGH:!aNULL:!MD5;

I can observe same behaviour, no matter what port I setup to listen on ssl (80 acts identical), so I strongly belive that adding ssl to listen directive causing that.

Is that how this suppose to work?

[Maxim Dounin]

The listen directive parameters apply to the listening socket as a whole. That is, if you specify that the listening socket should work over SSL by specifying the ssl parameter, all connections to the listening socket will be handled as SSL connections. Quoting ​docs:

The ssl parameter (0.7.14) allows specifying that all connections accepted on this port should work in SSL mode.

Since listening sockets can be shared between multiple name-based virtual hosts, nginx makes it possible to specify parameters only in one of the listen directives, so there is no need to specify all the parameters multiple times. This is essentially what your configuration does: listen 443 ssl; with the ssl parameter in one of the server blocks, and listen 443; which refers to the same listening socket in another server block.

Hope this helps.

[https://stackoverflow.com/users/12360980/logi]

OK, so this is a lack of knowledge, sorry for creating an unnecessary ticket.
Thank you for your wonderful work and time!