That fails the request even with a valid certificate

On Fri, Jan 17, 2020, 04:53 Maxim Dounin <[email protected]> wrote:

> Hello!
>
> On Thu, Jan 16, 2020 at 12:42:38PM -0700, Sampson Crowley wrote:
>
> > Maxim the work around you provided is invalid,
> >
> >     ssl_verify_client optional;
> >
> >     set $allow 0;
> >
> >     if ($ssl_client_verify = OK) {
> >         set $allow 1;
> >     }
> >
> >     if ($method = OPTIONS) {
> >         set $allow 1;
> >     }
> >
> >     if (!$allow) {
> >         return 496;
> >     }
> >
> > returns 'invalid condition "!$allow" by nginx and the service fails to
> start
>
> Sure, my bad.  It should be "$allow != 1".  And "$method" should be
> "$request_method" instead.
>
> --
> Maxim Dounin
> http://mdounin.ru/
> _______________________________________________
> nginx-devel mailing list
> [email protected]
> http://mailman.nginx.org/mailman/listinfo/nginx-devel
>
_______________________________________________
nginx-devel mailing list
[email protected]
http://mailman.nginx.org/mailman/listinfo/nginx-devel

Reply via email to