I have some URL's that I like protecting with ssl client certificates using directives like these in my apache configs:
SSLVerifyClient require
SSLVerifyDepth 10
SSLRequireSSL
SSLOptions +StrictRequire
SSLRequire %{REMOTE_ADDR} =~ m/^127\.0\.0\.1$/ \
or ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
and %{SSL_CLIENT_I_DN_CN} eq "xxx" \
and %{SSL_CLIENT_S_DN_Email} in {"[email protected]", "[email protected]",} )
There don't seem to be any nginx directives to handle this, so I assume I have to pass everything on to Apache backend.
Which brings me to my question, how to pass encrypted ssl? All the proxying is decrypting the ssl packets at nginx level before passing them on to Apache.