Hi All,
The particular feature I am interested is SSL termination for TCP Upstream.
We have an application which accepts messages (TCP) over TLS. With NGINX, I want to do the following:
1. Terminate TLS at NGINX and then NGINX will forward the decrypted packets to the application.
2. There should be mutual authentication between NGINX and the client (for the application). I am finding out documentation which talks about server side authentication (client verifying server's certificate), but I am not able to find out the steps to configure mutual authentication (both client and server verifying each other's certificates). Any suggestions?
https://www.nginx.com/resources/admin-guide/nginx-tcp-ssl-termination/
3. Also is it possible to allow (SSL handshake) only if client has a specific identity. Is it possible to implement in NGINX or NGINX Plus?
Thanks,
Arnab
The particular feature I am interested is SSL termination for TCP Upstream.
We have an application which accepts messages (TCP) over TLS. With NGINX, I want to do the following:
1. Terminate TLS at NGINX and then NGINX will forward the decrypted packets to the application.
2. There should be mutual authentication between NGINX and the client (for the application). I am finding out documentation which talks about server side authentication (client verifying server's certificate), but I am not able to find out the steps to configure mutual authentication (both client and server verifying each other's certificates). Any suggestions?
https://www.nginx.com/resources/admin-guide/nginx-tcp-ssl-termination/
3. Also is it possible to allow (SSL handshake) only if client has a specific identity. Is it possible to implement in NGINX or NGINX Plus?
Thanks,
Arnab