Load SSL certificates from system's store

2015-09-23 Thread Michal Cichra
Hi there, There is very basic patch to nginx (which is the same with 1.9.5) to allow loading all SSL certificates from CApath. When doing proxy with ssl verification, nginx needs ssl certificates to be loaded through file. That causes trouble for dynamic proxies, that can proxy to any host. Wor

Re: Load SSL certificates from system's store

2015-09-23 Thread Maxim Dounin
Hello! On Wed, Sep 23, 2015 at 10:58:19AM -0700, Michal Cichra wrote: > Hi there, > > There is very basic patch to nginx (which is the same with 1.9.5) to allow > loading all SSL certificates from CApath. > > When doing proxy with ssl verification, nginx needs ssl certificates to be > loaded

Re: Load SSL certificates from system's store

2015-09-23 Thread Michal Cichra
Hi Maxim, sorry for double posting. I was talking to some developers here on nginx.conf and they suggested proposing it on dev list. I could not find the previous post. Re OSX: it might not be server platform, but development one. Our use case is running a proxy in your production/dev that reco