openresty / stream-lua-nginx-module

Embed the power of Lua into NGINX TCP/UDP servers
BSD 2-Clause "Simplified" License
728 stars 198 forks source link

feature: add ssl trusted certificate #353

Closed theweakgod closed 4 months ago

theweakgod commented 4 months ago

This mainly adds the ssl_trusted_certificate feature to avoid issues where CA authentication issued by secondary certificates cannot succeed in mTLS. Added the trusted_cert parameter option for verify_client. I have made the corresponding modifications at the lua-resty-core: https://github.com/openresty/lua-resty-core/pull/473