On Mon, Dec 21, 2020 at 06:48:54AM -0500, balu wrote: Hi there,
the error log says: > 2020/12/21 11:46:45 [info] 14165#0: *6 client SSL certificate verify error: > (2:unable to get issuer certificate) while reading client request headers, > client: 49.207.211.47, server: nifi-test-nginx.insights.io, request: "GET > /favicon.ico HTTP/1.1", host: "nifi-test-nginx.insights.io", referrer: > "https://nifi-test-nginx.insights.io/nifi/?processGroupId=root&componentIds=87a087ca-0175-1000-ca56-1d437d733fb0" that nginx failed to verify the presented client certificate. You do have > ssl_verify_client optional_no_ca; in the provided server{} block, which includes > server_name nifi-test-nginx.insights.np.vocera.io; while the error log above refers to a different "server" and "host" value. Is there any chance that you have more than one port-443 listener configured in this nginx, and this request is being handled by something other than the config that you showed? Cheers, f -- Francis Daly fran...@daoine.org _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx