Skip to content

Commit 7133d2f

Browse files
jaypolansky1“jaypolansky1”mjang
authored
PR from Jay (#512)
* Commit from Jay * Apply suggestions from code review * Update content/nginx/admin-guide/security-controls/securing-http-traffic-upstream.md * Update content/nginx/admin-guide/security-controls/securing-http-traffic-upstream.md --------- Co-authored-by: “jaypolansky1” <“jaypolansky@gmail.com”> Co-authored-by: Mike Jang <3287976+mjang@users.noreply.github.com>
1 parent 76f998b commit 7133d2f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

content/nginx/admin-guide/security-controls/securing-http-traffic-upstream.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,14 +25,14 @@ You can purchase a server certificate from a trusted certificate authority (CA).
2525
<span id="client_certs"></span>
2626
## Obtaining an SSL Client Certificate
2727

28-
NGINX will identify itself to the upstream servers with an SSL client certificate. A trusted CA must sign the client certificate, which is configured on NGINX, together with the corresponding private key.
28+
NGINX will identify itself to the upstream servers with an SSL client certificate. A trusted CA must sign the client certificate, which is configured on NGINX together with the corresponding private key.
2929

30-
You will also need to configure the upstream servers to require client certificates for all incoming SSL connections. In addition, you will need to trust the CA that issued the NGINX client certificate. Then, when NGINX connects to the upstream server, it will provide its client certificate and the upstream server will accept it.
30+
You will also need to configure the upstream servers to require client certificates for all incoming SSL connections, and to trust the CA that issued NGINX client certificate. Then, when NGINX connects to the upstream, it will provide its client certificate and the upstream server will accept it.
3131

3232
<span id="config"></span>
3333
## Configuring NGINX
3434

35-
First, change the URL to an upstream group to support SSL connections. Specify the “https” protocol for the proxied server in the NGINX configuration file. Alternatively, [in the proxy_pass](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass) directive, specify an upstream group.)
35+
First, change the URL to an upstream group to support SSL connections. Specify the “https” protocol for the proxied server in the NGINX configuration file. Alternatively, [in the proxy_pass](https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_pass) directive, specify an upstream group.) >>>>>>> main
3636

3737
```nginx
3838
location /upstream {

0 commit comments

Comments
 (0)