> I will search for this. Not sure how to add this info to my logs, or
> whether it logs failures too?

$ssl_client_verify - contains the verification status


You have to define a custom log_format (http://nginx.org/en/docs/http/ngx_http_log_module.html#log_format )

For example:

log_format clientcerts '$remote_addr $ssl_client_s_dn $ssl_client_verify';
access_log logs/ssl.log clientcerts;


... and you can add whatever variables to better identify what's going on http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables

rr

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx