I am using NGINX web server. Configured my site with a setting where user will be challenged to present his certificate when he makes first request to the site by using following setting:
ssl_client_certificate /path/to/ca/cert/ca.crt; ssl_verify_client on;
When the user access the site, he gets prompted to present his certificate. but after selecting certificate, he gets following message:
400 Bad Request The SSL certificate error nginx/1.12.2
Access log shows:
"GET / HTTP/2.0" 400 633 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
Error log shows:
client SSL certificate verify error: (2:unable to get issuer certificate) while reading client request headers, client: 184.108.40.206, server: $xyz.net, request: "GET / HTTP/2.0", host:
openssl verify -CAfile /etc/nginx/certs/ca.crt /etc/nginx/certs
resulted in following error:
unable to load certificate 140622725740432:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: TRUSTED CERTIFICATE
I am very new to NGINX and short of ideas. please help.