search

smallstep / hello-mtls

:wave: Docs demonstrating mutual TLS configurations in various technologies
Apache License 2.0
97 stars 26 forks source link

Nginx example would not work in browser #94

Open barskykd opened 2 years ago

barskykd commented 2 years ago

https://smallstep.com/hello-mtls/doc/server/nginx

In this example ssl_client_certificate contains only root certificate without intermediate certs. This way server wouldn't be able to check client certs coming from browser (browser sends leaf cert only, not the whole bundle)

Server needs to have intermediates too in its ssl_client_certificate file.