Nginx optional_no_ca requests a certificate without validating its issuer

<h1> Nginx optional_no_ca requests a certificate without validating its issuer </h1> <p>Nginx's <code>ssl_verify_client</code> directive can be set to <code>on</code>, <code>off</code>, <code>optional</code>, or <code>optional_no_ca</code>. The last value is easy to misread. It requests a client certificate but does not verify the certificate chain against the configured trusted CA. Nginx describe

Read the source →