# Proxy\_pass to upstream with client certificate

**URL:** <https://www.ruby-forum.com/t/proxy-pass-to-upstream-with-client-certificate/216061>\
**Category:** NGINX\
**Created:** [January 24, 2012, 12:37pm UTC](https://www.ruby-forum.com/t/proxy-pass-to-upstream-with-client-certificate/216061 "2012-01-24T12:37:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dubstep](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/cdc98d/32.png) [@dubstep](https://www.ruby-forum.com/u/dubstep)\
**Post date:** [January 24, 2012, 12:37pm UTC](https://www.ruby-forum.com/t/proxy-pass-to-upstream-with-client-certificate/216061/1 "2012-01-24T12:37:33Z")

</div>

Is it possible to configure nginx to send a client certificate to  
upstream?

I’d like the flow to be:  
HTTP to nginx which proxies to [HTTPS://xyz/](HTTPS://xyz/) that uses a client  
certificate.

I don’t want the end client to use any certificate what so ever  
(preferably).

Regards,  
Magnus Jäderberg

Posted at Nginx Forum:

> **[proxy\_pass to upstream with client certificate](https://forum.nginx.org/read.php?2,221563,221563#msg-221563)**
>
> Is it possible to configure nginx to send a client certificate to upstream? I'd like the flow to be: HTTP to nginx which proxies to HTTPS://xyz/ that uses a client certificate. I don't want the end client to use any certificate what so ever...

---

<div class="post-metadata">

**Author:** ![mangler](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/8e7dd6/32.png) [@mangler](https://www.ruby-forum.com/u/mangler)\
**Post date:** [January 24, 2012, 6:34pm UTC](https://www.ruby-forum.com/t/proxy-pass-to-upstream-with-client-certificate/216061/2 "2012-01-24T18:34:23Z")

</div>

alternative if you really need it, you can tunnel through ssh/vpn with  
all the overhead involved

On Tue, Jan 24, 2012 at 9:46 AM, Maxim D. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)  
wrote:

> > 
> 
> [mailman.nginx.org archive](http://mailman.nginx.org/mailman/listinfo/nginx)  
> –  
> Nunca hubo un amigo que hiciese un favor a un enano, ni un enemigo que  
> le hiciese un mal, que no se viese recompensado por entero.

---

<div class="post-metadata">

**Author:** ![mangler](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/m/8e7dd6/32.png) [@mangler](https://www.ruby-forum.com/u/mangler)\
**Post date:** [January 24, 2012, 12:47pm UTC](https://www.ruby-forum.com/t/proxy-pass-to-upstream-with-client-certificate/216061/3 "2012-01-24T12:47:28Z")

</div>

Hello!

On Tue, Jan 24, 2012 at 06:37:12AM -0500, mangler wrote:

> Is it possible to configure nginx to send a client certificate to  
> upstream?
> 
> I’d like the flow to be:  
> HTTP to nginx which proxies to [HTTPS://xyz/](HTTPS://xyz/) that uses a client  
> certificate.
> 
> I don’t want the end client to use any certificate what so ever  
> (preferably).

No, it’s not currently supported.

Maxim D.