Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For a project as part of the European Grid Infrastructure (EGI) we need SSL client certificate verification for a service running on nginx. As there are several root CAs allowed within EGI, we need nginx to check them all during client certificate validation. In the documentation of nginx I could only find the parameter ssl_client_certificate which allows to specify just one file containing a root certificate.

Is there a way to specify more than one root CA for client certificate verification in nginx or do I have to use Apache for this?

share|improve this question
    
There is currently an ongoing discussion on the Nginx mailinglist on this topic. It seems Nginx only supports one file and you have to concatenate all CA certificates into that file. An open question is, which approach gives faster response times and if Nginx should support CA lookup via hash based filenames. –  Florian Feldhaus Aug 10 '12 at 9:31

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.