Nginx – what is the alternative of apache’s SSLCACertificateFile in nginx

apache-2.4nginx

I am Migrating from an Apache Web Server to Nginx and i need an alternative of apache's SSLCACertificateFile in nginx library.

I have used :-

ssl_certificate as alternative of SSLCertificateFile and
ssl_certificate_key as alternative of SSLCertificateKeyFile.

But didn't get any alternative for SSLCACertificateFile .

Any suggestion would be helpful??

Best Answer

Are you sure you need SSLCaCertificateFile? This is for client authentication. Don't you need SSLCertificateChainFile to provide intermediate certificates?

In the later case just append your intermediates to the file referenced as ssl_certificate.

If you really are after client authentication, check ssl_client_certificate / ssl_client_verify directives.

Related Solutions

Nginx – How to Reply with 200 Without Serving a File

Yes, you can

location / {
    return 200 'gangnam style!';
    # because default content-type is application/octet-stream,
    # browser will offer to "save the file"...
    # if you want to see reply in browser, uncomment next line 
    # add_header Content-Type text/plain;
}

Nginx: problem configuring a proxy_pass

Okay, I tried this on my nginx testbed and got the following in the log:

2011/08/29 22:35:31 [error] 10074#0: *1257 no host in upstream "", client: 10.103.0.9, server: localhost, request: "GET /proxy/ya.ru HTTP/1.1", host: "10.110.0.42"

So, nginx is just not a right tool to do that, upstream hosts can't be defined at runtime.

Best Answer

Related Solutions

Nginx – How to Reply with 200 Without Serving a File

Nginx: problem configuring a proxy_pass

Related Topic