Verification of proxied HTTPS server certificate

shivramg94 nginx-forum at forum.nginx.org
Tue Sep 24 10:35:10 UTC 2019


Hi,

According to the documentation
(http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_verify)
the directive "proxy_ssl_verify" is used to enable or disabled the
verification of the proxied HTTPS server certificate. But it doesn't talk
about what all different types of validations (like Host Name Verification,
Certificate Expiry etc) it does. 

Could someone list out the validations Nginx performs on the obtained server
certificate from the upstream server when the above said directive is set to
"on"?

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,285683,285683#msg-285683



More information about the nginx mailing list