Welcome! Log In Create A New Profile

Advanced

reverse proxy with mTLS does not send client certificate to upstream

October 27, 2022 07:58AM
Dear,

I am trying to setup an TLS auth reverse proxy with proxy_ssl_certificate
and proxy_ssl_certificate_key like below:

http {
server {
listen 8080;
resolver 8.8.8.8;

location ~ /mimir/(.*)$ {
proxy_pass https://<upstream-domain>/$1;
proxy_ssl_certificate_key /etc/nginx/tls-auth/mimir/tls.key;
proxy_ssl_certificate /etc/nginx/tls-auth/mimir/tls.crt;
}
}
}

Somehow the nginx reverse proxy does not send the configured client
certificate, resulting in the error below from my upstream server:

<html>
<head><title>400 No required SSL certificate was sent</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>No required SSL certificate was sent</center>
<hr><center>nginx</center>
</body>
</html>

What am I missing?

Best regards,
Andrej
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org
Subject Author Posted

reverse proxy with mTLS does not send client certificate to upstream

andrejvanderzee October 27, 2022 07:58AM

Re: reverse proxy with mTLS does not send client certificate to upstream

Maxim Dounin October 27, 2022 04:16PM

Re: reverse proxy with mTLS does not send client certificate to upstream

Aleksandar Lazic October 27, 2022 06:02PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 186
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready