Nginx upstream certificate validation

General Discussion
1

When trying to use certificate validation for nginx upstream using the below configs

    proxy_ssl_trusted_certificate /etc/nginx/trusted_ca_cert.crt;
    proxy_ssl_verify       on;

There is a need to specify a specific certificate, it is possible to provide multiple certificates in here for validation, instead of a single certificate file in Windows nginx

2

Hi there,

Untested by me, but the documentation for proxy_ssl_trusted_certificate (Module ngx_http_proxy_module) suggests that it must be a single file, but that the file can contain multiple certificates.

Does that work in your case?

The file would be the pem-encoded certificates between lines of

-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

with maybe some free-form comments outside those lines.

Cheers,