failure to limit access to a secure area with self-signed client SSL cert fingerprint match

Francis Daly francis at daoine.org
Tue Mar 21 21:48:44 UTC 2023


On Mon, Mar 20, 2023 at 01:51:47PM -0400, PGNet Dev wrote:

Hi there,

> now, on access to EITHER of
> 
> 	https://otherexample.com
> 	https://otherexample.com/sec/test
> 
> in browser i get
> 
> 	400 Bad Request
> 	The SSL certificate error
> 	nginx

What does the error_log say about this request and response?

It looks like some part of your nginx/tls setup fails to verify the
client certificate; maybe the debug or info log will hint at why.

Good luck with it,

	f
-- 
Francis Daly        francis at daoine.org


More information about the nginx mailing list