Welcome! Log In Create A New Profile

Advanced

Re: Client Certificate OCSP validate

Frank Liu
April 13, 2019 03:44AM
https://trac.nginx.org/nginx/ticket/1534

> On Apr 13, 2019, at 12:16 AM, itplayer <nginx-forum@forum.nginx.org> wrote:
>
> Hi,
> I'm wondering that if NGINX currently(I use 1.14.1) support client
> certificate OCSP validation?
> The use case is when client try to login our web application, NGINX sit in
> front of the application as reverse-proxy, does NGINX can verify the client
> cert to make sure the client cert doesn't revoked by authority?
>
> If yes, my configuration below is correct?
>
> ssl_stapling on;
> resolver 8.8.8.8;
> ssl_stapling_responder http://10.10.10.10:2560;
> ssl_stapling_verify on;
> ssl_trusted_certificate /etc/nginx/test/ca_chains.pem;
>
>
> Thanks in advanced.
>
> Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283763,283763#msg-283763
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Client Certificate OCSP validate

itplayer April 13, 2019 03:16AM

Re: Client Certificate OCSP validate

Frank Liu April 13, 2019 03:44AM

Re: Client Certificate OCSP validate

itplayer April 13, 2019 05:12AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 172
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready