ssl client auth trouble

Reinis Rozitis r at
Fri Aug 30 19:21:53 UTC 2019

> I will search for this.  Not sure how to add this info to my logs, or
> whether it logs failures too?

$ssl_client_verify - contains the verification status

You have to define a custom log_format ( )

For example:

log_format clientcerts '$remote_addr $ssl_client_s_dn $ssl_client_verify';
access_log  logs/ssl.log clientcerts;

.. and you can add whatever variables to better identify what's going on 


More information about the nginx mailing list