diff --git a/doc/settings/nginx.md b/doc/settings/nginx.md index 7d0fdd3b5152a358081072dc5337e3f652b7121f_ZG9jL3NldHRpbmdzL25naW54Lm1k..7ba4b0ea19a7c4a994cb9a4931b8700a274b0b3a_ZG9jL3NldHRpbmdzL25naW54Lm1k 100644 --- a/doc/settings/nginx.md +++ b/doc/settings/nginx.md @@ -531,7 +531,8 @@ ```ruby nginx['ssl_verify_client'] = "on" + nginx['ssl_client_certificate'] = "/etc/pki/tls/certs/root-certs.pem" ``` and running reconfigure. @@ -534,7 +535,8 @@ ``` and running reconfigure. -These additional options NGINX supports for configuring SSL client authentication can also be configured: +Optionally, you can configure how deeply in the certificate chain NGINX should verify +before deciding that the clients don't have a valid certificate (default is `1`): ```ruby @@ -539,6 +541,5 @@ ```ruby - nginx['ssl_client_certificate'] = "/etc/pki/tls/certs/root-certs.pem" nginx['ssl_verify_depth'] = "2" ```