ssl_client_cert is deprecated. use ssl_client_escaped_cert. add ssl_c…

…lient_verify to enable client certificate verification.
kubernetes · Oct 9, 2017 · 788eb58 · 788eb58
1 parent 1f269d4
commit 788eb58
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/rootfs/etc/nginx/template/nginx.tmpl b/rootfs/etc/nginx/template/nginx.tmpl
@@ -741,7 +741,8 @@ stream {
 
             # Pass the extracted client certificate to the backend
             {{ if not (empty $server.CertificateAuth.CAFileName) }}
-            proxy_set_header ssl-client-cert        $ssl_client_cert;
+            proxy_set_header ssl-client-cert        $ssl_client_escaped_cert;
+            proxy_set_header ssl-client-verify      $ssl_client_verify;
             {{ end }}
 
             # Allow websocket connections