Fabio/nginx-proxy-auto-docker
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added ssl client support when req'd files present

Browse source
This commit is contained in:
Sy14r 2021-04-08 12:26:31 +00:00
parent 6613e272eb
commit e374594fcb
1 changed files with 20 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
nginx.tmpl
View file

@ -294,6 +294,26 @@ server {
ssl_dhparam {{ printf "/etc/nginx/certs/%s.dhparam.pem" $cert }}; ssl_dhparam {{ printf "/etc/nginx/certs/%s.dhparam.pem" $cert }};
{{ end }} {{ end }}
{{/* SSL Client Certificate Validation */}}
{{/* If we have a client specific ca (form of fqdn.ca.crt) then use that */}}
{{ if (exists (printf "/etc/nginx/certs/%s.ca.crt" $cert)) }}
ssl_client_certificate {{ printf "/etc/nginx/certs/%s.ca.crt" $cert }};
ssl_verify_client on;
{{/* If a corresponding crl is present for the fqdn specific ca include it */}}
{{ if (exists (printf "/etc/nginx/certs/%s.ca.crl" $cert)) }}
ssl_crl {{ printf "/etc/nginx/certs/%s.ca.crl" $cert }};
{{ end }}
{{/* If we didn't have a client specific ca (ca.crt) but we have a global one use that */}}
{{ else if (exists "/etc/nginx/certs/ca.crt") }}
ssl_client_certificate /etc/nginx/certs/ca.crt;
ssl_verify_client on;
{{/* If a corresponding crl is present for the global ca include it */}}
{{ if (exists "/etc/nginx/certs/ca.crl")}}
ssl_crl /etc/nginx/certs/ca.crl;
{{ end }}
{{ end }}
{{ if (exists (printf "/etc/nginx/certs/%s.chain.pem" $cert)) }} {{ if (exists (printf "/etc/nginx/certs/%s.chain.pem" $cert)) }}
ssl_stapling on; ssl_stapling on;
ssl_stapling_verify on; ssl_stapling_verify on;