Welcome! Log In Create A New Profile

Advanced

Re: Disable only Hostname verification of proxied HTTPS server certificate

Maxim Dounin
November 20, 2019 07:50AM
Hello!

On Thu, Nov 07, 2019 at 10:23:20AM -0500, shivramg94 wrote:

> Is there any way where we can configure nginx to only verify the root of the
> proxied HTTPS server (upstream server) certificate and to skip the host name
> (or domain name) verification?
>
> As I understand, proxy_ssl_verify directive can be used to completely
> enable/disable the verification of proxied HTTPS server certificate but not
> selectively. Is there any directive to only disable the host name
> verification?

No.

You can, however, set a particular name to verify, by using the
"proxy_ssl_name" directive. See http://nginx.org/r/proxy_ssl_name
for details.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Disable only Hostname verification of proxied HTTPS server certificate

shivramg94 November 07, 2019 10:23AM

Re: Disable only Hostname verification of proxied HTTPS server certificate

Maxim Dounin November 20, 2019 07:50AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 76
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready