Re: Proxy to upstream HTTPS server *with different* keys/certs in nginx

2014-02-09 Thread tbamise
tbamise Wrote: --- > > > > Connections to upstream servers don't use any client certificates. > > > > Yes I agree. The connection to the upstream server uses the nginx > server certificates specified by $ssl_certificate(_key). > Basically I wan

Re: Proxy to upstream HTTPS server *with different* keys/certs in nginx

2014-02-09 Thread tbamise
itpp2012 Wrote: --- > tbamise Wrote: > --- > > Is it possible to use a different set of certs for the client side > and > > another set for the upstream server side? > > Use a tunnel like stunne

Re: Proxy to upstream HTTPS server *with different* keys/certs in nginx

2014-02-09 Thread tbamise
> > Connections to upstream servers don't use any client certificates. > Yes I agree. The connection to the upstream server uses the nginx server certificates specified by $ssl_certificate(_key). Basically I want to use: for downstream to client - a.cert & a.cert.key for connection to clients fo

Re: Proxy to upstream HTTPS server *with different* keys/certs in nginx

2014-02-09 Thread itpp2012
tbamise Wrote: --- > Is it possible to use a different set of certs for the client side and > another set for the upstream server side? Use a tunnel like stunnel to encrypt upstreams, which supports client certs. Posted at Nginx Forum: http://f

Re: Proxy to upstream HTTPS server *with different* keys/certs in nginx

2014-02-09 Thread Maxim Dounin
Hello! On Sat, Feb 08, 2014 at 07:39:12PM -0500, tbamise wrote: > Is it possible to use a different set of certs for the client side and > another set for the upstream server side? > > My use case is to have different sets of local ssl certs on Nginx. A > key/cert pair for communicating with cli