> I will search for this. Not sure how to add this info to my logs, or
> whether it logs failures too?
$ssl_client_verify - contains the verification status
You have to define a custom log_format (http://nginx.org/en/docs/http/ngx_http_log_module.html#log_format )
For example:
log_format clientcerts '$remote_addr $ssl_client_s_dn $ssl_client_verify';
access_log logs/ssl.log clientcerts;
... and you can add whatever variables to better identify what's going on http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables
rr
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx