Re: OCSP stapling for client certificates

2019-04-13 Thread itplayer
Other than CRL, any other alternative way we can do OCSP validation in the pipeline? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,252893,283766#msg-283766 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/ngi

Re: Client Certificate OCSP validate

2019-04-13 Thread itplayer
Hi Frank, Yes, I see this ticket. So does it mean that NGINX still don't support this feature? Any alternative way to do the same thing? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,283763,283765#msg-283765 ___ nginx mailing list nginx@ngi

Client Certificate OCSP validate

2019-04-13 Thread itplayer
Hi, I'm wondering that if NGINX currently(I use 1.14.1) support client certificate OCSP validation? The use case is when client try to login our web application, NGINX sit in front of the application as reverse-proxy, does NGINX can verify the client cert to make sure the client cert doesn't revoke