Re: SSL handshake failed with mutual TLS

2016-06-22 Thread Andrey Novikov
Thank everyone for advices. I have server certificate (first) and Intermediate CA certificate (second) in bundle file specified in `ssl_certificate` directive. I have Intermediate CA certificate (first) and Root CA certificate (second) in bundle file specified in `ssl_client_certificate`. Both se

Re: SSL handshake failed with mutual TLS

2016-06-21 Thread steve
On 06/21/2016 03:59 AM, CJ Ess wrote: Check that you have both the certificate and any intermediate certificates in your pem file - you can skip the top-most CA certificates as those are generally included in your browser's CA store - but the intermediates are not. I believe Nginx wants cer

Re: SSL handshake failed with mutual TLS

2016-06-20 Thread CJ Ess
Check that you have both the certificate and any intermediate certificates in your pem file - you can skip the top-most CA certificates as those are generally included in your browser's CA store - but the intermediates are not. I believe Nginx wants certs ordered from bottom-most (your cert) to to

Re: SSL handshake failed with mutual TLS

2016-06-19 Thread Francis Daly
On Sat, Jun 18, 2016 at 11:29:49AM +0300, Andrey Novikov wrote: Hi there, > We've successfully configured interaction with two of these systems > (all with mutual TLS), and when pointed another one to this server > we've got next message in the error.log (log level for error log is > set to debug

SSL handshake failed with mutual TLS

2016-06-18 Thread Andrey Novikov
Hello everyone. I'm setting up an internal web server that will accept requests from another systems (mostly enterprise-ish something) authenticated with client certificates. We've successfully configured interaction with two of these systems (all with mutual TLS), and when pointed another one to