Welcome! Log In Create A New Profile

Advanced

Re: reverse proxy with mTLS does not send client certificate to upstream

Aleksandar Lazic
October 27, 2022 06:02PM
Hi.

On 27.10.22 13:56, Andrej van der Zee wrote:
> Dear,
>
> I am trying to setup an TLS auth reverse proxy with proxy_ssl_certificate
> and proxy_ssl_certificate_key like below:
>
> http {
> server {
> listen 8080;
> resolver 8.8.8.8;
>
> location ~ /mimir/(.*)$ {
> proxy_pass https://<upstream-domain>/$1;
> proxy_ssl_certificate_key /etc/nginx/tls-auth/mimir/tls.key;
> proxy_ssl_certificate /etc/nginx/tls-auth/mimir/tls.crt;
> }
> }
> }
>
> Somehow the nginx reverse proxy does not send the configured client
> certificate, resulting in the error below from my upstream server:
>
> <html>
> <head><title>400 No required SSL certificate was sent</title></head>
> <body>
> <center><h1>400 Bad Request</h1></center>
> <center>No required SSL certificate was sent</center>
> <hr><center>nginx</center>
> </body>
> </html>
>
> What am I missing?

What's in the error log?

You can also try to run nginx in debug mode then will you see more
Information why the connection attempt does not work.

http://nginx.org/en/docs/debugging_log.html

> Best regards,
> Andrej
>
>
> _______________________________________________
> nginx mailing list -- nginx@nginx.org
> To unsubscribe send an email to nginx-leave@nginx.org
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org
Subject Author Posted

reverse proxy with mTLS does not send client certificate to upstream

andrejvanderzee October 27, 2022 07:58AM

Re: reverse proxy with mTLS does not send client certificate to upstream

Maxim Dounin October 27, 2022 04:16PM

Re: reverse proxy with mTLS does not send client certificate to upstream

Aleksandar Lazic October 27, 2022 06:02PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 154
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready