From: sebdet <sebastien.determe@intl.att.com>
Date: Thu, 17 Oct 2019 09:17:03 +0000 (+0200)
Subject: Fix nginx config
X-Git-Tag: 5.0.0~129
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=8ed71d0cfe1f7466b6169e7f9585b3f8616eba19;p=clamp.git

Fix nginx config

Fix nginx config for AAF so that certificate can go through it

Issue-ID: CLAMP-519
Change-Id: Ie10975d733107022b933b83354881fd704512e26
Signed-off-by: sebdet <sebastien.determe@intl.att.com>
---

diff --git a/src/main/docker/frontend/nginx/nginx.conf b/src/main/docker/frontend/nginx/nginx.conf
index 5bcac5cf..e18c1e83 100644
--- a/src/main/docker/frontend/nginx/nginx.conf
+++ b/src/main/docker/frontend/nginx/nginx.conf
@@ -4,8 +4,10 @@ server {
   ssl_protocols TLSv1.2;
   ssl_certificate /etc/ssl/clamp.pem;
   ssl_certificate_key /etc/ssl/clamp.key;
+  ssl_verify_client optional_no_ca;
     location /restservices/clds/ {
         proxy_pass https://clamp-backend:8443;
+        proxy_set_header X-SSL-Cert $ssl_client_escaped_cert;
     }
   
   location / {