ssl client auth trouble

[Reinis Rozitis]

> I will search for this.  Not sure how to add this info to my logs, or
> whether it logs failures too?

$ssl_client_verify - contains the verification status


You have to define a custom log_format (http://nginx.org/en/docs/http/ngx_http_log_module.html#log_format )

For example:

log_format clientcerts '$remote_addr $ssl_client_s_dn $ssl_client_verify';
access_log  logs/ssl.log clientcerts;


.. and you can add whatever variables to better identify what's going on  http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables 

rr