Welcome! Log In Create A New Profile

Advanced

Client Certificate OCSP validate

April 13, 2019 03:16AM
Hi,
I'm wondering that if NGINX currently(I use 1.14.1) support client certificate OCSP validation?
The use case is when client try to login our web application, NGINX sit in front of the application as reverse-proxy, does NGINX can verify the client cert to make sure the client cert doesn't revoked by authority?

If yes, my configuration below is correct?

ssl_stapling on;
resolver 8.8.8.8;
ssl_stapling_responder http://10.10.10.10:2560;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/nginx/test/ca_chains.pem;


Thanks in advanced.
Subject Author Posted

Client Certificate OCSP validate

itplayer April 13, 2019 03:16AM

Re: Client Certificate OCSP validate

Frank Liu April 13, 2019 03:44AM

Re: Client Certificate OCSP validate

itplayer April 13, 2019 05:12AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 302
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready