Dear Maxim Dounin
Hello !
Thank you for quick response.
I understand your answer.
Add
if ($ssl_client_i_dn != "...") {
return 403;
}
and I can limit access from issued intermediate CA.
Regards,
Atsushi
Posted at Nginx Forum:
https://forum.nginx.org/read.php?2,263895,263936#msg-263936
Hi there,
I'm trying to set up reverse proxy server with client authentication.
--- Environment ---
My CA is 2 tier.
Root CA - intermediate CA - Client Certificate.
--- Problem Discripton ---
When I accessed proxy server from laptop pc,
only the correct client certificate was suggested,
and au