ssl_client_cert is deprecated. use ssl_client_escaped_cert. add ssl_client_verify to enable client certificate verification.
This commit is contained in:
parent
1f269d4e4d
commit
788eb58bfe
1 changed files with 2 additions and 1 deletions
|
@ -741,7 +741,8 @@ stream {
|
||||||
|
|
||||||
# Pass the extracted client certificate to the backend
|
# Pass the extracted client certificate to the backend
|
||||||
{{ if not (empty $server.CertificateAuth.CAFileName) }}
|
{{ if not (empty $server.CertificateAuth.CAFileName) }}
|
||||||
proxy_set_header ssl-client-cert $ssl_client_cert;
|
proxy_set_header ssl-client-cert $ssl_client_escaped_cert;
|
||||||
|
proxy_set_header ssl-client-verify $ssl_client_verify;
|
||||||
{{ end }}
|
{{ end }}
|
||||||
|
|
||||||
# Allow websocket connections
|
# Allow websocket connections
|
||||||
|
|
Loading…
Reference in a new issue