SSL proxy without certificate

[Edmund Lhot]

Hello!

I want to proxy ssl connections to a backend without a certicate but it
isn't working:

server {
  listen x.x.x.x:443;
  location / {
      proxy_pass https://y.y.y.y:443;
  }
}

I tried to use an approach like this (client auth with self generated
cert), but it didn't work too:

server {

        listen x.x.x.x:443 ssl;

        ssl                  on;
        ssl_certificate      /etc/nginx/certs/server.crt;
        ssl_certificate_key  /etc/nginx/certs/server.key;
        ssl_client_certificate /etc/nginx/certs/ca.crt;
        ssl_verify_client optional;

        location / {
            proxy_pass https://y.y.y.y:443;

        }
}

Must I have the customer certificate to proxy this kind of request or there
is another way to do this?

Tks!

Edmund
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20121122/2b0b595d/attachment.html>