Re: [nginx] CONF: Make ssl_client_certificate directive optional with TLSv1.3

2024-08-19 Thread Aleksei Bavshin
On 8/16/2024 8:02 AM, Praveen Chaudhary wrote: Hi Nginx Devs Bumping patch to the top for review. CC: @Sergey Kandaurov Thanks for contributing client certificate validation with OSCP.  It is a long awaited feature. In this patch, I am trying to fix another lingering concern. It will be great

Re: [nginx] CONF: Make ssl_client_certificate directive optional with TLSv1.3

2024-08-19 Thread Praveen Chaudhary
Thanks Aleksei for the review. Agree, It makes sense to have explicit error message to require either ssl_client_certificate or ssl_trusted_certificate. Because: Nginx prints error number from SSL to identify SSL error\routine, but for a client or admin, it may be still hard to find why "SSL certi