nginx双向认证客户端配置
2015-09-24 10:33
573 查看
公司要我用nginx做一个https双向认证,给了我证书,也是研究了几天才研究出来,把源码贴出来让大家伙参考一下:
---------------------------------------------------------------------------------------------------------------------------------------------------------
server {
listen 5555;
#listen somename:8080;
server_name ip; #服务端ip
location / {
proxy_pass https://ip:port/; #服务端ip和port
proxy_ssl_verify off;
#proxy_ssl_trusted_certificate /home/nginx/openresty/nginx/certs/client.p12;
proxy_ssl_certificate /home/nginx/openresty/nginx/certs/client.crt;
proxy_ssl_certificate_key /home/nginx/openresty/nginx/certs/client.key;
root html;
index index.html index.htm;
}
location /verify_auth_test/ {
root /home/nginx/openresty/nginx;
index index.html index.htm;
}
}
---------------------------------------------------------------------------------------------------------------------------------------------------------
上面即相当于:如果访问 curl"http://localhost:5555/XXX/XXXX......" 就转成请求服务端的http://ip:port/XXX/XXXX......
so easy,这就是客户端的配置,服务端的配置我暂时不清楚,有时间可以研究一下,应该差不多!
---------------------------------------------------------------------------------------------------------------------------------------------------------
server {
listen 5555;
#listen somename:8080;
server_name ip; #服务端ip
location / {
proxy_pass https://ip:port/; #服务端ip和port
proxy_ssl_verify off;
#proxy_ssl_trusted_certificate /home/nginx/openresty/nginx/certs/client.p12;
proxy_ssl_certificate /home/nginx/openresty/nginx/certs/client.crt;
proxy_ssl_certificate_key /home/nginx/openresty/nginx/certs/client.key;
root html;
index index.html index.htm;
}
location /verify_auth_test/ {
root /home/nginx/openresty/nginx;
index index.html index.htm;
}
}
---------------------------------------------------------------------------------------------------------------------------------------------------------
上面即相当于:如果访问 curl"http://localhost:5555/XXX/XXXX......" 就转成请求服务端的http://ip:port/XXX/XXXX......
so easy,这就是客户端的配置,服务端的配置我暂时不清楚,有时间可以研究一下,应该差不多!
相关文章推荐
- nginx搭建过程
- nginx 转帖
- 隐藏nginx 版本等信息
- "Nginx服务器在使用HTML5
- nginx配置语法
- nginx+fastcgi+c/cpp
- 隐藏nginx版本号,以加强服务安全
- 用GoAccess来分析Nginx日志
- 关于部署StartCom免费证书,FireFox不信任的问题
- Nginx: error while loading shared libraries: libpcre.so.1
- 通过修改配置真正解决php文件上传大小限制问题(nginx+php)
- sentos nginx安装
- nginx 并发数问题思考:worker_connections,worker_processes与 max clients
- 强大的负载均衡+静态文件WEB服务器nginx实战
- nginx中配置pathinfo模式示例
- rails 部署 nginx + passenger
- Nginx和Apache共存环境下apache获得真实IP
- nginx 502排错
- nginx + passenger 出现 Cannot stat .../config.ru': Permission denied 的错误的解决办法
- nginx解析php请求为404