Hi,


>> Yes I agree. The connection to the upstream server uses the nginx server
>> certificates specified by $ssl_certificate(_key).
>
> It looks like you didn't understand my answer. Again: connections
> to upstream servers don't use any client certificates. That is,
> no certificates are used by nginx when connecting to upstream
> servers.

Take a look at haproxy, it can use client certificates when connecting to
backend servers [1].


Regards,

Lukas


[1] http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5.2-crt
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx