Hi,
I have used Nginx as a proxy infront of my authorization server (IDP) which handles mtls. We have a requirement to extract SHA256 fingerprint from client certificate in Nginx and forward it to the underlying auth server endpoint.
Nginx variable $ssl_client_fingerprint returns the SHA1 fingerprint of the client certificate. Is there a way to extract SHA256 fingerprint of the client cert?
Thanks

The code which performs this digest is located in src/event/ngx_event_openssl.c - This is presently hard-coded to return a SHA1 fingerprint.