Hello!

On Mon, Dec 28, 2015 at 04:50:23PM -0500, sumeetmaru wrote:

> Please if anyone could take a look and reply?

Messages you are seeing suggests that you've failed to provide
proper trusted certificates via proxy_ssl_trusted_certificate and
ssl_client_certificate files.

An example configuration which demonstrates how to configure
mutual authentication using a self-signed certificate:

server {
listen 8080;

location / {
proxy_pass https://127.0.0.1:8443/empty;

proxy_ssl_verify on;
proxy_ssl_trusted_certificate test.crt;
proxy_ssl_name "test.example.com";

proxy_ssl_certificate test.crt;
proxy_ssl_certificate_key test.key;
}
}

server {
listen 8443 ssl;

ssl_certificate test.crt;
ssl_certificate_key test.key;

ssl_verify_client on;
ssl_client_certificate test.crt;

location / {
return 204;
}
}

--
Maxim Dounin
http://nginx.org/

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx