Added support for Client-Side Certificate Authentication

This commit is contained in:
Nobody84 2018-11-14 11:19:37 +01:00 committed by GitHub
parent c33dedf10b
commit 6b6466cdbe
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -256,6 +256,15 @@ server {
ssl_dhparam {{ printf "/etc/nginx/certs/%s.dhparam.pem" $cert }};
{{ end }}
{{ if (exists (printf "/etc/nginx/ca/%s.crt" $host)) }}
ssl_client_certificate {{ (printf "/etc/nginx/ca/%s.crt" $host) }};
ssl_verify_client on;
{{ end }}
{{ if (exists (printf "/etc/nginx/ca/%s.crl" $host)) }}
ssl_crl {{ (printf "/etc/nginx/ca/%s.crl" $host) }};
{{ end }}
{{ if (exists (printf "/etc/nginx/certs/%s.chain.pem" $cert)) }}
ssl_stapling on;
ssl_stapling_verify on;