Skip to content
This repository has been archived by the owner on Feb 26, 2022. It is now read-only.

Proxy should validate upstream TLS #12

Open
PeterJCLaw opened this issue Jan 30, 2020 · 0 comments
Open

Proxy should validate upstream TLS #12

PeterJCLaw opened this issue Jan 30, 2020 · 0 comments

Comments

@PeterJCLaw
Copy link
Member

Amazingly it turns out this isn't on by default in nginx!

proxy_ssl_verify is the setting of interest for this. (via https://stackoverflow.com/a/36508456)

While we're at it, tweaking proxy_ssl_protocols to drop the old protocols might also be nice, though considerably less important.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant