I have a web service to be used with or without SSL client certificate. The users will get full access only when their browser is authentificated with the certificate. Otherwise they get a basic functionality.
The nginx settings for that are:
ssl_client_certificate /etc/nginx/client-cert/ca.crt; ssl_verify_client optional;
The problem is that no browser prompts for the certificate to be selected when connecting to the service.
What is the behavior i should expect when ssl_verify_client is optional? Should i still get the prompt?
If it is, where might be the problem?
If not prompting is the expected behavior, how would i force the browser to send that particular certificate to the service?
Running nginx 1.10.3 on Ubuntu 16.04.4 LTS
nginx config: https://pastebin.com/GwjVc0cZ