Hello!

On Thu, Nov 07, 2019 at 10:23:20AM -0500, shivramg94 wrote:

> Is there any way where we can configure nginx to only verify the root of the
> proxied HTTPS server (upstream server) certificate and to skip the host name
> (or domain name) verification?
>
> As I understand, proxy_ssl_verify directive can be used to completely
> enable/disable the verification of proxied HTTPS server certificate but not
> selectively. Is there any directive to only disable the host name
> verification?

No.

You can, however, set a particular name to verify, by using the
"proxy_ssl_name" directive. See http://nginx.org/r/proxy_ssl_name
for details.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx