rfc: ssl_client_pubkey variable

Arvid Picciani aep at exys.org
Tue Feb 8 12:48:54 UTC 2022


Hi,

we would like to authenticate clients by their pubkey instead of using
a common trust root. Would a patch be acceptable that adds the
ssl_client_pubkey to the http_ssl module?

i've never touched nginx code, but as far as i understand all it needs
is another function in ngx_event_openssl.c that uses X509_get_pubkey
and encodes that as hex.

/b/
Arvid



More information about the nginx-devel mailing list