Re: Certificate Chain Validation

2020-02-03 Thread Maxim Dounin
ot;certificate chain validation" in the original question was intended to mean, there may be at least three cases considered: 1. Certificate chains as configured for nginx itself, by using within the ssl_certificate directive (http://nginx.org/r/ssl_certificate). For these certificates nginx

Re: Certificate Chain Validation

2020-01-30 Thread slowgary
Thanks for the correction Maxim. I tested this before posting by using an old certificate. Nginx did not throw an error but the browser did notify that the connection was insecure. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,286852,286865#msg-286865

Re: Certificate Chain Validation

2020-01-30 Thread Maxim Dounin
Hello! On Wed, Jan 29, 2020 at 09:16:58PM -0500, slowgary wrote: > Nginx does not validate the expiration date of certificates. This statement is not true. -- Maxim Dounin http://mdounin.ru/ ___ nginx mailing list nginx@nginx.org http://mailman.nginx

Re: Certificate Chain Validation

2020-01-29 Thread slowgary
Nginx does not validate the expiration date of certificates. Posted at Nginx Forum: https://forum.nginx.org/read.php?2,286852,286857#msg-286857 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Certificate Chain Validation

2020-01-29 Thread gagandeep
Does nginx validates all the Cerificates in the certificate chain? Like the expiry date of the all the intermediate certificates. If one the intermediate certificate has expired will nginx still proceed or will it break the connection? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,2