Enable client cert validation
This commit is contained in:
parent
5bd39e1a15
commit
c00db63f40
@ -55,9 +55,9 @@ data:
|
|||||||
ssl_stapling_verify on;
|
ssl_stapling_verify on;
|
||||||
resolver 8.8.8.8 8.8.4.4;
|
resolver 8.8.8.8 8.8.4.4;
|
||||||
# Request and validate client certificate
|
# Request and validate client certificate
|
||||||
#ssl_verify_client on;
|
ssl_verify_client on;
|
||||||
#ssl_verify_depth 10;
|
ssl_verify_depth 10;
|
||||||
#ssl_client_certificate /etc/nginx/ssl/ca/client-ca.pem;
|
ssl_client_certificate /etc/nginx/ssl/client-ca-bundle.pem;
|
||||||
# Guard against HTTPS -> HTTP downgrade
|
# Guard against HTTPS -> HTTP downgrade
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; always";
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; always";
|
||||||
location / {
|
location / {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user