Hello! On Thu, Nov 07, 2019 at 10:23:20AM -0500, shivramg94 wrote:
> Is there any way where we can configure nginx to only verify the root of the > proxied HTTPS server (upstream server) certificate and to skip the host name > (or domain name) verification? > > As I understand, proxy_ssl_verify directive can be used to completely > enable/disable the verification of proxied HTTPS server certificate but not > selectively. Is there any directive to only disable the host name > verification? No. You can, however, set a particular name to verify, by using the "proxy_ssl_name" directive. See http://nginx.org/r/proxy_ssl_name for details. -- Maxim Dounin http://mdounin.ru/ _______________________________________________ nginx mailing list [email protected] http://mailman.nginx.org/mailman/listinfo/nginx
