Enable two way SSL on Nginx web server - nginx-dev-email-history

K

18 Aug '23

Hi,

I am running nginx version: nginx/1.24.0  on CentOS Linux release 7.9.2009
(Core)

# nginx -v
nginx version: nginx/1.24.0
# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)
#

Is there a way to enable two way SSL on Nginx web server?

Please guide me. Thanks in Advance.

Best Regards,

Kaushal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20230818/386f3d17/attachment.htm>

share

A

Aleksandar

18 Aug '23

Hi Kaushal.

On 2023-08-18 (Fr.) 03:22, Kaushal Shriyan wrote:
> Hi,
> 
> I am running nginx version: nginx/1.24.0  on CentOS Linux 
> release 7.9.2009 (Core)
> 
> # nginx -v
> nginx version: nginx/1.24.0
> # cat /etc/redhat-release
> CentOS Linux release 7.9.2009 (Core)
> #
> 
> Is there a way to enable two way SSL on Nginx web server?
> 
> Please guide me. Thanks in Advance.

Haven't you asked a similar question on the tomcat-user list?
https://marc.info/?t=169146150800001&r=1&w=3

There was some questions send to you which haven't received any answers, 
the questions here are similar.

* could you be specific about what you have actually done?
* what's your configuration

There are several blog entries in the internet which you can try to 
follow to setup the mutual authentication.
https://html.duckduckgo.com/html?q=nginx%20mutual%20authentication

> Best Regards,
> 
> Kaushal

Regards
Alex

share

K

Kaushal

18 Aug '23

On Fri, Aug 18, 2023 at 1:39 PM Aleksandar Lazic <al-nginx at none.at> wrote:

> Hi Kaushal.
>
> On 2023-08-18 (Fr.) 03:22, Kaushal Shriyan wrote:
> > Hi,
> >
> > I am running nginx version: nginx/1.24.0  on CentOS Linux
> > release 7.9.2009 (Core)
> >
> > # nginx -v
> > nginx version: nginx/1.24.0
> > # cat /etc/redhat-release
> > CentOS Linux release 7.9.2009 (Core)
> > #
> >
> > Is there a way to enable two way SSL on Nginx web server?
> >
> > Please guide me. Thanks in Advance.
>
> Haven't you asked a similar question on the tomcat-user list?
> https://marc.info/?t=169146150800001&r=1&w=3
>
> There was some questions send to you which haven't received any answers,
> the questions here are similar.
>
> * could you be specific about what you have actually done?
> * what's your configuration
>
> There are several blog entries in the internet which you can try to
> follow to setup the mutual authentication.
> https://html.duckduckgo.com/html?q=nginx%20mutual%20authentication
>
> > Best Regards,
> >
> > Kaushal
>
> Regards
> Alex
>

Thanks Alex for the quick response. I could do it using the below
configuration in nginx.conf

ssl_verify_client on;
> ssl_client_certificate
> /etc/ssl/certs/cbclientcerts/clientfullchaincert.pem;
> ssl_verify_depth 1;

Best Regards,

Kaushal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20230818/f29328c6/attachment.htm>

share