Differences

This shows you the differences between two versions of the page.

--- wiki:proxy_pass_nginx_connection_using_self_signed_certificates [2022/07/19 14:30] – created antisa
+++ wiki:proxy_pass_nginx_connection_using_self_signed_certificates [2022/07/20 11:24] (current) – [Frontend server configuration] trusted_ca_cert file content explained antisa
@@ Line 27: / Line 27: @@
 </code>
-If you followed the certificate creation howto from above, certificate name and key name should all be the same. The //trusted_ca_cert.crt// file should contain only the **server.crt** contents.
+If you followed the certificate creation howto from above, certificate name and key name should all be the same. The //trusted_ca_cert.crt// file should contain the concatenated **server.crt** and **rootCA** contents.
 //proxy_ssl_name// should be exactly the same as the **CN** field in the server.crt. Otherwise, the nginx will look at the //proxy_pass// directly and take that hostname and try to compare it with info in the certificate. So if you created the server.crt with CN named "remote", the //proxy_ssl_name// and //proxy_ssl_server_name// are not needed.
@@ Line 76: / Line 76: @@
   * [[wiki:openssl_commands|Openssl commands]]
   * [[wiki:nginx_http_https_config|nginx http to https config]]
+  * [[wiki:nginx_troubleshooting|Nginx troubleshooting]]
 ====== References ======