Re: force nginx to use SSL/TLS alert on invalid client certificate

2021-03-02 Thread Maxim Dounin
Hello! On Tue, Mar 02, 2021 at 03:30:02AM -0500, charlemagnelasse wrote: > How can I force nginx also to report the client certificate error via the > TLS alert mechanisms instead of this useless HTML page? This is not currently posssible. On the other hand, if you want to make the page more us

force nginx to use SSL/TLS alert on invalid client certificate

2021-03-02 Thread charlemagnelasse
If I am using a Apache to verify the client certificate and the client certificate is invalid (e.g. revoked) than I can get the appropriate SSL/TLS alert which can be evaluated by the client: curl -v --insecure --cert cert.pem --key key.pem --cacert ca.pem https://127.0.0.1:443/1/config *