Differences

This shows you the differences between two versions of the page.

--- wiki:proxy_pass_nginx_connection_using_self_signed_certificates [2022/07/20 11:21] – [See also] add nginx troubleshooting antisa
+++ wiki:proxy_pass_nginx_connection_using_self_signed_certificates [2022/07/20 11:24] (current) – [Frontend server configuration] trusted_ca_cert file content explained antisa
@@ Line 27: / Line 27: @@
 </code>
-If you followed the certificate creation howto from above, certificate name and key name should all be the same. The //trusted_ca_cert.crt// file should contain only the **server.crt** contents.
+If you followed the certificate creation howto from above, certificate name and key name should all be the same. The //trusted_ca_cert.crt// file should contain the concatenated **server.crt** and **rootCA** contents.
 //proxy_ssl_name// should be exactly the same as the **CN** field in the server.crt. Otherwise, the nginx will look at the //proxy_pass// directly and take that hostname and try to compare it with info in the certificate. So if you created the server.crt with CN named "remote", the //proxy_ssl_name// and //proxy_ssl_server_name// are not needed.