Nginx force client certification

manpreet Best Answer 2 years ago

I want to force client SSL certification in nginx server. I created the certificates. I added this into nginx configuration:

    ssl_client_certificate /CA/certs/cacert.pem;
    ssl_crl /CA/crl/ca.crl;
    ssl_verify_client on;
    ssl_verify_depth 2;

It is working in browsers, if certificate is not present, the error is "400 Bad Request No required SSL certificate was sent". But when I issue the command

curl https://example.com

I do not get the error about clent certificates, it returns the page.

I also added:

if ($ssl_client_verify != SUCCESS) {
   return 403;
}

but it seems like $ssl_client_verify is SUCCESS although there is no client certificate.